Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
- ID
- 15339
- Status
- summarized
- Published
- 19 Aug 2026, 12:58 AM
- Fetched
- 19 Aug 2026, 4:05 AM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/ransom-busters-claims-it-hacked.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 2.5
- Created
- 19 Aug 2026, 4:06 AM
- Tags
- Audience
- developerssaas_founders
What happened
A ransomware affiliate calling itself 'Ransom Busters' has been emailing victim organizations proactively, claiming to have exploited vulnerabilities in ransomware-as-a-service administrative panels for over three years, and offering to delete stolen data for $20,000–$60,000. GuidePoint Research and Intelligence Team (GRIT) says the actor appears to be an affiliate across multiple RaaS operations including DragonForce, Settra, and Anubis, and that the activity likely violates the U.S. Computer Fraud and Abuse Act.
Why it matters
This is a cybercrime-of-the-week story with no direct impact on AI tooling, agent frameworks, or developer infrastructure this audience ships with. Foundors running SaaS should already have offline backups and incident-response plans; this story doesn't change that calculus. No actionable takeaway beyond existing ransomware hygiene.
Discussion angle
Brief mention only: the emerging pattern of threat actors monetizing both sides of ransomware incidents — extorting victims as attackers and then re-extorting them as 'rescuers' — and why paying unauthorized third parties is legally and operationally risky.