Ransomware gang BlackCat exit scams affiliates with millions in Bitcoin after attacking medical IT firm

Cyber gang BlackCat allegedly scammed its personal associates because the group went darkish shortly after it disrupted the U.S. healthcare system.
An deal with related to the ransomware gang BlackCat, also called ALPHV and Noberus, obtained roughly $22 million value of Bitcoin (BTC) on Mar. 1 following a late February assault on United Healthcare’s Change Healthcare, a tech agency offering companies to hospitals and clinics.
Nevertheless, a twist emerged two days later when the deal with obtained over 1,000 BTC and promptly emptied the pockets. Subsequently, a person named “notchy,” claiming to be an affiliate of BlackCat, alleged in a publish on a cybercriminal underground discussion board that the gang had deceived its associates because it didn’t pay them their share for executing the assault, in accordance with a duplicate of the message shared on X by Dmitry Smilyanets, Recorded Future’s product administration director.
The affiliate additional disclosed that the assault on Change Healthcare’s community had granted entry to the info of quite a few different healthcare companies partnered with the medical IT supplier. In an announcement to Wired, Smilyanets confirmed that the associates “nonetheless have this information, and so they’re mad they didn’t obtain this cash.”
Each Recorded Future and TRM Labs, a blockchain evaluation agency, have reportedly recognized the Bitcoin deal with that obtained practically $100 million in Bitcoin as linked to the BlackCat hackers. In line with MistTrack, all of the BTC allegedly linked to illicit exercise has been transferred to eight completely different addresses and stays unspent up to now.
Established in late 2021, BlackCat operated on a ransomware-as-a-service mannequin, offering associates with malware and taking a share of ransom funds. Having focused quite a few corporations worldwide, together with Reddit in 2023, the gang’s web site was shut down by the FBI in December 2023, ensuing within the seizure of a number of web sites and the discharge of a decryption software.
Nevertheless, in February 2024, the U.S. Division of State annoucned a reward providing of as much as $10 million for info resulting in the identification or location of people holding key management positions throughout the BlackCat group and as much as $5 million for info resulting in the arrest or conviction of anybody concerned within the group.
