Home ยท Wiki ยท Entities & Threat Actors
type: entity ยท created: 2026-07-11 ยท updated: 2026-07-11 ยท tags: [ransomware-group, ransomware, le-action] ยท confidence: high ยท affected_sectors: [healthcare, finance, technology] ยท au_impact: true

BlackCat / AlphV

BlackCat (also known as AlphV or ALPHV) is a prolific ransomware-as-a-service (RaaS) group. In July 2026, a co-conspirator in the BlackCat/AlphV ransomware group was sentenced to nearly six years in prison, while a ransomware negotiator who secretly aided them received 70 months.

July 2026 Law Enforcement Actions

Sentencing 1: BlackCat/AlphV Conspirator

  • A co-conspirator in the BlackCat/AlphV ransomware group was sentenced to nearly six years in prison (raw/digests/Cyber-Digest-2026-07-11)
  • Demonstrates continued US/UK cooperation in ransomware prosecutions

Sentencing 2: Angelo Martino

  • Angelo Martino, 41, of Florida โ€” a paid ransomware negotiator
  • Sentenced to 70 months (nearly 6 years) in prison
  • Described by federal prosecutors as a "double agent"
  • Worked on behalf of five victims while covertly providing victim negotiating positions and strategies to the BlackCat attackers
  • Victims were unaware their negotiator was feeding information to the criminals (raw/digests/Cyber-Digest-2026-07-11)

Significance

Martino's case is particularly notable โ€” it reveals a new vector of compromise: the ransomware negotiator themselves can be compromised or complicit. This has implications for how organisations select and vet third-party incident response and negotiation services.

Australian Angle

Australian organisations should ensure any third-party ransomware negotiators or incident response providers are vetted. The Martino case highlights the risk of trusting intermediaries in ransom situations. The Acsc's "Don't Pay" guidance remains the safest approach. Au Impact

Related Pages