Ransom Busters: New Ransomware Affiliate Offers to Delete Stolen Data for Payment

A ransomware affiliate operating under the name 'Ransom Busters' has been identified sending unsolicited emails to victim organizations, offering to delete stolen data from ransomware groups' servers in exchange for payments ranging from $20,000 to $60,000. The group claims to have compromised the servers of ransomware operators and positions itself as a third-party recovery service. GuidePoint Research noted this behavior as anomalous, as it deviates from typical ransomware extortion tactics. No specific ransomware families, technical attack vectors, or victim details were disclosed in the report. The scheme appears to target organizations already impacted by ransomware attacks.