Ransomware negotiator hired to represent victims was working for the attackers

Summary

Ransomware negotiator Angelo Martino received a 70-month sentence for colluding with BlackCat attackers. He provided confidential client information to inflate ransom demands, receiving a portion of the payments. Martino also acted as an affiliate, deploying ransomware himself.

Key Takeaways

1. A former ransomware negotiator was sentenced to 70 months in prison yesterday after colluding with BlackCat scammers to extort the victims he was hired to protect.
2. Martino provided the cybercriminals with confidential negotiation information to maximize the ransoms in exchange for a portion of the ransom payments.
3. Angelo Martino sold out the very victims he was hired to represent, handing their confidential negotiating positions to BlackCat actors to drive up ransoms and enrich himself.

Statement Breakdown

• Claimed Facts: 70% of statements the article presents as facts
• Opinions: 20% of statements classified as editorial or subjective
• Claims: 10% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article relies on official government statements, court documents, and direct quotes from law enforcement. It presents factual information about a legal sentencing and criminal conspiracy. While it quotes law enforcement, it also includes a statement from the company involved, offering a more balanced perspective.

Bias assessment: Law Enforcement Focused. The article's narrative is heavily shaped by the US government's sentencing memorandum and FBI statements. While factual, the framing emphasizes the prosecution's perspective and the severity of the crime as defined by law enforcement.

Note: This article presents information primarily from government sources and court documents. While factual, consider the perspective of law enforcement in the narrative.

Credibility flag: Fact-based, official sources

Claimed Facts (10)

• This is a direct statement of a legal outcome.
• This states Martino's role and the stated purpose of his employment, as per official documents.
• This details Martino's plea and his claim of cooperation.
• This provides factual information about the sentencing of co-defendants.
• This outlines the financial penalties imposed as part of the sentence.
• This states the financial gains from the criminal activity, supported by legal documentation.
• This provides specific financial data on the scale of the extortion.
• This provides factual context about the ransomware group's impact.
• This states the employment timeline of the individual involved.
• This is a statement from the company regarding their awareness of the actions.

Opinions (5)

• This is a strong statement of condemnation and interpretation of Martino's actions.
• This expresses the company's judgment on the nature and intent of the actions.
• This is a statement of the company's position and interpretation of their victim status.
• This is the company's defense and explanation of how the fraud was perpetrated.
• This is the company's statement about their response to the allegations.

Claims (5)

• The use of 'likely' and the broad sum of '$75 million' without specific breakdown for Martino's direct inflation makes this an estimation rather than a precisely proven fact.
• While the seizure is factual, the statement that he 'had already used much of it' is a characterization of his financial actions.
• While the FBI's actions are generally factual, the claim that the tool 'gave victims the ability to restore their systems' is a broad statement that may not apply universally to all victims or all types of encryption.
• The word 'typically' indicates a generalization rather than a strict, universally applied rule, making it less of a hard fact.
• The term 'consequential losses' is vague and not quantified, making it an assertion of impact without specific evidence presented in the text.

Key Sources

• US government — Prosecution
• Angelo Martino — Former Ransomware Negotiator
• Brett Leatherman — FBI Cyber Division Assistant Director
• FBI — Law Enforcement Agency
• DigitalMint — Company
• Kevin Martin — Ransomware Negotiator
• Ryan Goldberg — Incident Manager
• Sygnia — Security Firm