Cybersecurity-Insiders DigitalMint's $75 Million Ransomware Controversy Unfolds
Article Content
- •DigitalMint allegedly earned $75 million from negotiating ransomware payments.
- •The company is under investigation for its role in the ransomware ecosystem.
- •The controversy raises ethical concerns about ransomware negotiation practices.
DigitalMint, a company specializing in ransomware negotiation, has come under scrutiny after reports revealed that it allegedly profited $75 million from ransomware attacks. The firm is accused of negotiating payments on behalf of victims, raising ethical concerns about its role in the ransomware ecosystem. Affected organizations include various businesses that sought DigitalMint's assistance during ransomware incidents. The attack method primarily involved ransomware strains that encrypted data, demanding payment in cryptocurrencies. The scope of the impact is significant, as the allegations suggest a systemic issue within the negotiation process that could embolden attackers. DigitalMint has not publicly responded to the allegations, and investigations are ongoing. Security experts are analyzing the implications of this controversy on the broader cybersecurity landscape. The incident has sparked discussions about the ethics of ransomware negotiation and the responsibilities of companies in this space.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (1)
Following this threat?
Track DigitalMint in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…