Ransomware affiliate poses as recovery firm

An outfit called Ransom Busters posed as a recovery firm to undercut ransomware affiliates, offering victims recovery for $20,000 to $60,000. GuidePoint Security found it was likely an affiliate across DragonForce, Settra, and Anubis operations, using shared fingerprints like the password "Numlock!123.