“Security researcher” offers to delete data stolen by ransomware attackers

Organisation who pay ransomware crooks to decrypt and delete their data are not entirely sure if the criminals will fulfil their promises. Some are exploiting this by posing as security researchers and asking victims to hack into the server infrastructure of the ransomware groups involved to delete the exfiltrated data. Arctic Wolf security researchers have encountered this offer twice, in October and November 2023. Both instances involved an entity called Ethical Side Group and someone known as "xanonymoux." The threat …

asking attackers criminals cybersecurity data decrypt delete exfiltrated exfiltrated data exploiting hack infrastructure organisation pay ransomware ransomware groups researcher researchers security security researcher security researchers server stolen