Skip to content
  • Home
  • Cyber Map
  • About Us – Contact
  • Disclaimer
  • Terms and Rules
  • Privacy Policy
Cyber Web Spider Blog – News

Cyber Web Spider Blog – News

Globe Threat Map provides a real-time, interactive 3D visualization of global cyber threats. Monitor DDoS attacks, malware, and hacking attempts with geo-located arcs on a rotating globe. Stay informed with live logs and archive stats.

  • Home
  • Cyber Map
  • Cyber Security News
  • Security Week News
  • The Hacker News
  • How To?
  • Toggle search form
U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks

U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks

Posted on November 4, 2025November 4, 2025 By CWS

Nov 04, 2025Ravie LakshmananRansomware / Cybercrime
Federal prosecutors within the U.S. have accused a trio of allegedly hacking the networks of 5 U.S. firms with BlackCat (aka ALPHV) ransomware between Might and November 2023 and extorting them.
Ryan Clifford Goldberg, Kevin Tyler Martin, and an unnamed co–conspirator (aka “Co-Conspirator 1”) based mostly in Florida, all U.S. nationals, are stated to have used the ransomware pressure towards a medical system firm based mostly in Tampa, Florida, a pharmaceutical firm based mostly in Maryland, a physician’s workplace based mostly in California, an engineering firm based mostly in California, and a drone producer based mostly in Virginia.
The Chicago Solar-Instances first reported the indictment over the weekend, stating Martin and Co-Conspirator 1 had been employed as ransomware menace negotiators for an organization named DigitalMint on the time when these incidents came about. Goldberg was an incident response supervisor for cybersecurity firm Sygnia.

All three people are not working on the respective corporations, with each DigitalMint and Sygnia stating they’ve cooperated with legislation enforcement on the matter. In July 2025, Bloomberg reported that the U.S. Federal Bureau of Investigation (FBI) was trying right into a former worker of DigitalMint for supposedly taking a minimize from ransomware funds.
In response to the indictment doc, Goldberg, Martin, and the co-conspirator have been accused of wilfully participating in a conspiracy to “enrich” themselves by accessing victims’ networks or computer systems in an unauthorized method, stealing their information, putting in the BlackCat ransomware on their programs in change for a cryptocurrency cost, and dividing the illicit proceeds amongst them –

Round Might 13, 2023, the defendants attacked the medical system agency and demanded an approximate $10,000,000 ransom cost. The corporate ended up paying digital forex value roughly $1,274,000 on the time of cost.
Round Might 2023, the defendants attacked the agency and demanded an unspecified quantity as ransom.
Round July 2023, the defendants attacked the physician’s workplace and demanded an approximate $5,000,000 ransom cost.
Round October 2023, the defendants attacked the engineering firm and demanded an approximate $1,000,000 ransom cost.
Round November 2023, the defendants attacked the drone producer and demanded an approximate $300,000 ransom cost.

It is stated that they didn’t handle to extort a monetary cost from the opposite victims. Whereas Martin has pleaded not responsible, courtroom data present that Goldberg allegedly confessed to being recruited by the unnamed co-conspirator to “try to ransom some firms” throughout an interview with the FBI and that he performed the assaults to get out of debt. The third particular person has not been indicted.
Each Goldberg and Martin have been charged with conspiracy to intervene with interstate commerce by extortion, interference with interstate commerce by extortion, and intentional injury to a protected pc. These accusations may incur a most penalty as much as 50 years in federal jail.

The Hacker News Tags:Accused, Attacks, BlackCat, Cybersecurity, Indict, Insiders, Prosecutors, Ransomware, U.S

Post navigation

Previous Post: Microsoft Detects “SesameOp” Backdoor Using OpenAI’s API as a Stealth Command Channel
Next Post: Weaponized Putty and Teams Ads Deliver Malware Allowing Hackers to Access Network

Related Posts

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack The Hacker News
Why Your Security Culture is Critical to Mitigating Cyber Risk Why Your Security Culture is Critical to Mitigating Cyber Risk The Hacker News
Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL The Hacker News
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT The Hacker News
Is Your Google Workspace as Secure as You Think it is? Is Your Google Workspace as Secure as You Think it is? The Hacker News
VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages The Hacker News

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News

Recent Posts

  • Muddled Libra Exploits VMware vSphere in Cyber Attack
  • Feiniu NAS Devices Targeted in Major Botnet Attack
  • Rapid SSH Worm Exploits Linux Systems with Credential Stuffing
  • Odido Telecom Hacked: 6.2 Million Accounts Compromised
  • Lazarus Group Targets npm and PyPI with Malicious Packages

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Archives

  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025

Recent Posts

  • Muddled Libra Exploits VMware vSphere in Cyber Attack
  • Feiniu NAS Devices Targeted in Major Botnet Attack
  • Rapid SSH Worm Exploits Linux Systems with Credential Stuffing
  • Odido Telecom Hacked: 6.2 Million Accounts Compromised
  • Lazarus Group Targets npm and PyPI with Malicious Packages

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News