Angelo Martino, a ransomware negotiator trusted to assist victims, was found to have secretly worked with attackers to help defraud victims of more than $75 million, according to officials. After pleading guilty to conspiracy to commit extortion affecting interstate commerce, Martino received a 70-month prison sentence, despite seeking a shorter term through a plea agreement.

Authorities have seized approximately $10 million in assets linked to Martino’s ransomware scheme. Following his release, he will also be required to contribute 10% of his future earnings toward victim compensation. The victims, including four companies and a nonprofit organization, paid ransom amounts ranging from $213,000 to $26.8 million, totaling more than $75 million.

Figure 1. Cyber Negotiator Jailed for Ransomware Scheme

Court documents revealed that Martino began working with the BlackCat ransomware group in April 2023 while employed by DigitalMint, a company that helps victims negotiate ransomware incidents. Without his employer’s knowledge, Martino shared confidential information about victims’ negotiation strategies and positions with the attackers, who used the details to demand higher ransom payments and compensated him for his assistance. Figure 1 shows Cyber Negotiator Jailed for Ransomware Scheme.

Prosecutors also alleged that Martino and two co-conspirators, who had already received 48-month prison sentences, directly carried out ransomware attacks against five victims. Among those targeted was a medical device company that paid a $1.2 million ransom after the attack.

FBI Cyber Division Assistant Director Brett Leatherman said Martino betrayed the victims he was hired to support by sharing confidential negotiation details with BlackCat attackers. The information allegedly helped the ransomware group increase ransom demands while allowing Martino to profit from the scheme.

The BlackCat (ALPHV) ransomware group was linked to several major cyberattacks in 2023, including the disruption of MGM Resorts. In December of that year, the U.S. Department of Justice announced efforts to disrupt the group, with an FBI-developed decryption tool helping more than 500 victims avoid over $68 million in ransom payments. Authorities continue to pursue BlackCat’s operators and affiliates, offering rewards of up to $10 million for information leading to their capture.

References:

1. https://www.engadget.com/2214113/ransomware-negotiator-who-colluded-with-attackers-to-scam-victims-was-sentenced-to-70-months-in-prison/

Cite this article:

Janani R (2025), Cyber Negotiator Sentenced After Colluding with Ransomware Hackers, AnaTechMaz, pp. 473