BlackCat Ransomware Raises Ante After FBI Disruption
Summary: The FBI seized the darknet website of ALPHV/BlackCat, the Russia-based group it calls the world's second most prolific ransomware gang, and released a decryption tool that let more than 500 victims restore their systems. BlackCat briefly retook its site, claimed the operation touched only part of its work and would cost 3,000 victims their decryption keys, and said it was lifting all targeting restrictions except the ban on attacking CIS countries, while raising affiliate commissions to 90 percent.
Key Takeaway: A group the DOJ says has hit more than 1,000 victim organizations in roughly 18 months has now declared hospitals and nuclear power plants fair game, and it is offering affiliates 90 percent of payouts to keep them in line.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026