DOJ Accuses Ransomware Negotiator of Aiding ALPHV/BlackCat
Summary
Prosecutors accuse Angelo Martino of conducting ransomware attacks and sharing confidential negotiation details with ALPHV/BlackCat. DigitalMint fired him and introduced audited negotiation controls; the allegations remain distinct from the guilty pleas of two co-defend
Key points
- Prosecutors accuse former DigitalMint negotiator Angelo Martino of conducting at least 10 ransomware attacks with Ryan Goldberg and Kevin Martin and aiding ALPHV/BlackCat.
- The DOJ says Martino shared confidential negotiation information in 2023 to help co-conspirators maximize ransom payments.
- Prosecutors say the three earned about $1.2 million from an attack on a Florida medical company; Goldberg and Martin pleaded guilty, while Martino faces a conspiracy charge.
- DigitalMint says it terminated Martino and Martin, assisted the DOJ investigation, and added audited, logged cloud-based negotiation controls and executive oversight.
- The case highlights ethical risks when ransomware negotiators have access to attacker tools and confidential victim negotiations.
Article Details
- Event Type
- Criminal case involving an alleged insider who conducted ransomware attacks and secretly assisted the ALPHV/BlackCat group while working as a ransomware negotiator.
- Impact
- Prosecutors allege Angelo Martino shared confidential negotiation information to help maximize ransom payments. Martino, Ryan Goldberg, and Kevin Martin reportedly received about $1.2 million from an attack on a Florida medical company; prosecutors say extortion attempts against nine other victims were unsuccessful. DigitalMint terminated Martino and Martin and introduced audited, logged negotiation controls.
People
Threat Actors
ALPHVThe article names the now-defunct ransomware group as “ALPHV/BlackCat.” Prosecutors allege Martino worked with the group and shared confidential negotiation information with its actors.Angelo MartinoProsecutors allege he conducted at least ten ransomware attacks and shared confidential negotiation information with ALPHV/BlackCat actors in exchange for a portion of ransom payments. He was charged with conspiracy to interfere with interstate commerce by extortion.BlackCatThe article names the now-defunct ransomware group as “ALPHV/BlackCat.” Prosecutors allege Martino worked with the group and shared confidential negotiation information with its actors.Kevin Tyler MartinIdentified as one of the two men who allegedly worked with Martino on ransomware attacks. He pleaded guilty to conspiracy to obstruct commerce by extortion.Ryan GoldbergIdentified as one of the two men who allegedly worked with Martino on ransomware attacks. He pleaded guilty to conspiracy to obstruct commerce by extortion.