RANSOM BUSTERS CLAIMS IT HACKED RANSOMWARE SERVERS, ASKS VICTIMS FOR UP TO $60,000

Summary from the TLDR InfoSec newsletter

Ransom Busters emailed ransomware victims, seeking $20,000 to $60,000. It claimed access to ransomware servers and offered file recovery and deletion of stolen data. GuidePoint linked two incidents through shared tooling, a “Numlock!123” backdoor account, and hostname DESKTOP-BBETH6K. The activity may be a ransomware affiliate posing as a recovery service, but payments cannot verify data deletion.