Former DigitalMint Negotiator Pleads Guilty to Conspiring With BlackCat Affiliates
Summary
Angelo Martino pleaded guilty to conspiring with BlackCat/ALPHV affiliates while working as a DigitalMint ransomware negotiator, sharing clients’ confidential negotiating and insurance information. Prosecutors said the scheme helped extort $75.3 million.
Key points
- Martino admitted conspiring with BlackCat/ALPHV affiliates while working as a ransomware negotiator for DigitalMint in 2023.
- He shared clients’ confidential negotiating positions and insurance limits to help attackers maximize ransom demands.
- Five companies that hired DigitalMint paid ransoms; prosecutors said the payments included nearly $26.8 million from a nonprofit and nearly $25.7 million from a financial services company.
- Martino also admitted conspiring with former DigitalMint negotiator Kevin Tyler Martin and former Sygnia incident-response manager Ryan Clifford Goldberg to deploy BlackCat ransomware against five additional companies.
- Martin and Goldberg also pleaded guilty, according to the article.
- Authorities seized about $10 million in assets and cryptocurrency tied to Martino; he faces up to 20 years in prison, with sentencing scheduled for July 9.
Article Details
- Event Type
- Insider-assisted ransomware extortion conspiracy involving a ransomware negotiator who shared confidential victim negotiation and insurance information with BlackCat/ALPHV affiliates.
- Impact
- Five companies represented by Angelo John Martino III paid ransoms, and prosecutors said his conduct helped accomplices extort a combined $75.3 million. He also admitted conspiring with Kevin Tyler Martin and Ryan Clifford Goldberg to deploy BlackCat ransomware against five additional U.S. companies. Authorities seized about $10 million in assets and cryptocurrency tied to Martino's crimes. DigitalMint was not accused of knowledge of or involvement in the scheme.
MITRE ATT&CK
People
Andrew Tysen DuvaAssistant attorney general at the Justice Department's Criminal Division; commented publicly on Martino's betrayal of clients and assistance to cybercriminals.Brett LeathermanAssistant director of the FBI's Cyber Division; commented publicly on apprehending ransomware facilitators such as Martino.Jason A. Reding QuiñonesU.S. attorney for the Southern District of Florida; commented publicly on the case against Martino.
Threat Actors
ALPHVThe article identifies ALPHV as another name for BlackCat, whose affiliates conspired with Martino to attack and extort U.S. companies.Angelo MartinoPleaded guilty to conspiring with BlackCat/ALPHV affiliates to attack and extort companies he represented as a ransomware negotiator, sharing confidential negotiation and insurance information to increase ransom payouts.BlackCatRansomware group whose affiliates conspired with Martino to attack and extort U.S. companies. The article identifies ALPHV as another name for BlackCat.Kevin Tyler MartinPleaded guilty to participating in ransomware attacks and conspired with Martino and Ryan Clifford Goldberg to deploy BlackCat ransomware against five U.S. companies.Ryan GoldbergPleaded guilty to participating in ransomware attacks and conspired with Martino and Kevin Tyler Martin to deploy BlackCat ransomware against five U.S. companies.
Malware
Vendors
Countries
Industries
Financial ServicesMartino’s actions helped extort a combined $75.3 million, including large payments from a nonprofit and a financial services company.Healthcarestrain also claimed responsibility for the February 2024 attack on UnitedHealth Group subsidiary Change Healthcare, which paid a $22 million ransom and became the largest health care data breach on record, compromisingHospitalityransomware negotiations with himself and his co-conspirators include a nonprofit and companies in the hospitality, financial services, retail and medical industries.Medicalhis co-conspirators include a nonprofit and companies in the hospitality, financial services, retail and medical industries.Non-profitMartino’s actions helped extort a combined $75.3 million, including large payments from a nonprofit and a financial services company.Retailhimself and his co-conspirators include a nonprofit and companies in the hospitality, financial services, retail and medical industries.