Ransomware recovery CEO charged over secret ransom payments

Executive Summary

The CEO of MonsterCloud, a ransomware remediation firm, has been charged with fraud for secretly paying attackers to obtain decryptors while claiming to use proprietary technology to recover data. Authorities allege the payments were made covertly and the company misrepresented its recovery methods to victims.


Intelligence Metadata - Source Publisher: Bleeping Computer - Published Date: 2026-10-07T23:04:37+00:00 - Category: threat-intel

Original Description: The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data. [...]

"You can't let praise or criticism get to you. It's a weakness to get caught up in either one."

— John Wooden
Source: Bleeping Computer