U.S. prosecutors have charged two rogue employees of a cybersecurity company that specializes in negotiating ransom payments to hackers on behalf of their victims, with carrying out ransomware attacks of their own.

A third cybersecurity professional was also indicted as part of the scheme. 👀

More, from me: https://techcrunch.com/2025/11/03/doj-accuses-us-ransomware-negotiators-of-launching-their-own-ransomware-attacks/

DOJ accuses US ransomware negotiators of launching their own ransomware attacks | TechCrunch

Three people, including two U.S. ransomware negotiators, are accused of working on behalf of the ALPHV/BlackCat ransomware gang.

TechCrunch
@zackwhittaker not surprising. We've had the same thing with it security firms and them writing malware of their own for almost ever.
@agowa338 Is there anywhere where I can read more about this happening? I had no idea...
@IvanDSM Not really, but basically everyone told you about it when I started into this profession over 10 years ago.
@zackwhittaker Every cybersecurity company does this. Whether they are an EDR vendor, or a consultant, or they block DDoS attacks [they actually attack people also].
@zackwhittaker Shocking! Gambling in Rick's Cafe?!
@zackwhittaker nothing a few presidential "donations" can't fix
@zackwhittaker Trump will pardon them(if they have the money).
@zackwhittaker The kind of guys who would farm venomous snakes for the bounty