:

RANSOMWARE NEGOTIATOR SENTENCED TO 70 MONTHS FOR $75M SCAM

SECURITY DESK1 MIN READ
MON, JUL 13, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Angelo Martino, a ransomware negotiator, was sentenced to 70 months in prison for colluding with attackers to defraud victims. Martino helped orchestrate scams that extracted over $75 million from ransomware victims.

Martino's scheme exploited his position as a negotiator—a role typically trusted by companies targeted by ransomware attacks. Rather than protecting victims' interests, he worked with attackers to demand inflated ransoms and convince victims to pay. The case highlights vulnerabilities in the ransomware ecosystem, where third-party negotiators act as intermediaries between attacked organizations and criminals. Martino's conviction demonstrates the criminal justice system's focus on prosecuting those who facilitate cyber extortion, not just the attackers themselves. Ransomware remains a significant threat to businesses and institutions. Attackers demand payment in exchange for returning encrypted data or agreeing not to publish stolen information. Negotiators are often hired to reduce ransom demands, but Martino's case shows the risks of inadequate vetting and oversight. The 70-month sentence reflects the severity of the fraud and the substantial financial harm caused to victims.

■ SOURCES

Engadget

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

3H AGOIndustry Desk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

3H AGOSecurity Desk

Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.

6H AGOAI Desk

A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.

8H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.