Scammers pose as ransomware recovery agents, but just go on to steal more
from victims

Date:
Thu, 20 Aug 2026 15:30:00 +0000

Description:
Ransom Busters are not an actual ransomware recovery firm - they're
ransomware affiliates looking to steal your money, too.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter GuidePoint observed Ransom Busters posing as recovery firms in ransomware incidents Group claimed to
hack RaaS panels, offering decryption keys for $20K$60K Researchers say its likely the same affiliates behind infections, not genuine rescuers Ransomware operations have evolved again, and this time around the crooks are pretending to be the good guys.

Cybersecurity researchers GuidePoint Security were recently brought in to respond to multiple ransomware attacks against their clients. In some of
those incidents, the victims were also contacted by a group calling
themselves Ransom Busters, which offered to delete the stolen files from the attackers servers, while providing the victims with working decryption keys. What made the offer suspicious was the fact that Ransom Busters reached out
to the victims before the attackers had gone public. The crooks claimed to have hacked into the admin panels of multiple Ransomware-as-a-Service (RaaS) operations, including DragonForce, Settra, and Anubis, giving them not just insight into who was targeted, but also access to stolen data and the decryption keys. Latest Videos From TechRadar Watch full video here: Just another affiliate For their services, Ransom Busters ask between $20,000, and $60,000 - however, the researchers are saying this is all a ruse, and that Ransom Busters are, most likely, just affiliates of these ransomware
services. Not only that, but they are also most likely the ones who infected these companies with ransomware in the first place.

They said that both the attackers and Ransom Busters are using the same software, same tactics, and same identifiers, leading to the conclusion that its the same group on both ends of the spectrum. You may like Experts warn ransomware hackers will often lower their prices - with some giving discounts up to 96% Bad news paying a ransomware demand might cause hackers to come back and ask for more Cost of ransomware recovery too high? Heres how to stop footing the bill

The good news is that no one seems to have paid Ransom Busters for their offer. The only thing GuidePoint observed was one victim paying the actual ransom demand, rather than the fake recovery firm. That firm, fortunately,
did not have its name listed on the leak site, and its files remain secure
for now.

Pretending to be a recovery firm is the next evolutionary step in the life of ransomware. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

In its early days, ransomware was all about encrypting the computers and asking for payment in exchange for the decryption key. When companies responded by building out strong backups, the criminals moved to stealing files and threatening to release them to the public. Soon after, some added Distributed Denial of Service (DDoS) into the mix, blocking not just the back end but also the front-end, in an effort to force a payment.

Some criminals even called their victims on the phone for further intimidation.

These days, more and more groups are moving away from encryptors and focus solely on data theft, since its cheaper yet equally lucrative.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/scammers-pose-as-ransomware-recovery-ag ents-but-just-go-on-to-steal-more-from-victims


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)