<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Ransomware recovery CEO charged over secret ransom payments]]></title><description><![CDATA[<p dir="auto">The owner of ransomware remediation firm <strong>MonsterCloud</strong> faces federal charges for allegedly defrauding ransomware victims. According to the allegations, the company told clients it could recover their encrypted data using proprietary technology, while actually paying the attackers behind the scenes for decryptors and concealing those payments.</p>
<ul>
<li>Clients were allegedly led to believe MonsterCloud's own tools and expertise were responsible for restoring access to their files.</li>
<li>The actual recovery method was reportedly ransom payments made quietly to the threat actors.</li>
</ul>
<p dir="auto"><em>The charges center on the gap between what victims were told and what was actually done on their behalf.</em></p>
<p dir="auto">Source: <a href="https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments" target="_blank" rel="noopener noreferrer nofollow ugc">Publication Name</a></p>
<p dir="auto">If your organization has ever used a third-party recovery firm after an attack, would you have any way of knowing whether a ransom was paid on your behalf?</p>
]]></description><link>https://xploitlk.com/topic/606/ransomware-recovery-ceo-charged-over-secret-ransom-payments</link><generator>RSS for Node</generator><lastBuildDate>Tue, 27 Oct 2026 07:48:43 GMT</lastBuildDate><atom:link href="https://xploitlk.com/topic/606.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 08 Oct 2026 00:30:17 GMT</pubDate><ttl>60</ttl></channel></rss>