#coveware
-
“Ransom Busters”: A Ransomware Affiliate Posing as Rescuers
Researchers at GuidePoint have found that a “post-attack recovery” firm is, in all likelihood, the author of those very attacks, trying to snatch the ransom out from under its own employers.