By using OnionWiki.com, you agree to our privacy policy and terms of use.
Accept
Donate
OnionWiki Logo Main OnionWiki Logo Main
The Hidden Wiki You Need
Search
  • Content Sections
    • Guides
    • Dark Web News
  • About
    • The Only Hidden Wiki You Need for Dark Web Sites and Onion Links
    • Privacy Policy
    • Terms of Service
    • Contact Us
OnionWikiOnionWiki
  • Content Sections
  • About
Search
  • Content Sections
    • Guides
    • Dark Web News
  • About
    • The Only Hidden Wiki You Need for Dark Web Sites and Onion Links
    • Privacy Policy
    • Terms of Service
    • Contact Us
Copyright © 2026 ⋅ All Rights Reserved ⋅ OnionWiki
OnionWiki » Cyber Negotiator Sentenced to Nearly Six Years for Aiding BlackCat Ransomware Group
News

Cyber Negotiator Sentenced to Nearly Six Years for Aiding BlackCat Ransomware Group

By The OnionWiki Team
Last updated: July 21, 2026
6 Min Read
Share
  • A federal court sentenced cyber negotiator Angelo Martino to seventy months in prison and seized over eight million dollars in crypto for betraying clients. 
  • Martino secretly disclosed sensitive client strategies and insurance limits to the BlackCat hackers to increase ransom amounts.
  • Officials have confiscated luxury properties, yachts, and digital assets, as experts advise companies to ensure strict vendor regulations.
Cyber Negotiator Sentenced to Nearly Six Years for Aiding BlackCat Ransomware Group

A federal court seized over 8.3 million dollars in digital coins from a convicted cyber negotiator recently. Law enforcement officials seized Bitcoin, Monero, XRP, Stellar, and Solana from the person’s wallets. Alongside that, law enforcement confiscated expensive properties, luxury cars, and boats acquired from illegal profits.

Angelo Martino, the guilty party, was sentenced to seventy months of imprisonment in a correctional institution. He pretended to help victimized companies during severe digital extortion attacks.

Instead, he secretly passed confidential company files to dangerous hackers. Criminal gangs used his inside information to demand massive ransom payouts. This shocking case reveals how dishonest security insiders can betray their own clients for personal wealth.

Companies hire specialized negotiators to lower payment demands during computer system lockouts. Therefore, business owners share private financial records and insurance details with these trusted advisers. However, Martino abused his insider position to enrich himself through backchannel deals.

He partnered with a notorious extortion gang known as BlackCat. The criminal group relies on malicious software to lock corporate computers and demand money. Rather than protecting his clients, Martino fed victim strategy notes directly to the attackers. As a result, the hackers knew the exact maximum cash amounts victims could afford.

How the Cyber Insider Betrayed Corporate Clients

Martino operated as a double agent while representing distressed companies in crisis. When victimized firms made reasonably lower settlement offers, Martino tipped off the hackers. Consequently, the extortionists kept rejecting lower offers until victims paid maximum amounts.

Furthermore, he shared internal insurance policy limits so criminals knew how much coverage existed. In exchange for his treason, the hacker group gave Martino a generous share of stolen cash. According to the details from the US Department of Justice, Martino exploited five separate corporate clients. Combined, these victimized firms paid over seventy-five million dollars in illegal extortion fees.

Eventually, Martino expanded his criminal activities beyond merely sharing private negotiation notes. He teamed up with two other corrupt security workers to deploy file-locking software directly. The trio targeted healthcare companies and device manufacturers across the country. 

After extracting big payments, the men divided the stolen digital tokens three ways. Next, they passed the digital funds through multiple intermediary wallets to clean the money. Authorities confirm that insider threats create severe vulnerabilities for modern organizations. Corrupt employees bypass basic security barriers because leadership trusts them with sensitive administrative access.

Seizing Illegal Assets and Enforcing Federal Prison Sentences

Law enforcement agents uncovered the secret chat logs connecting Martino to the extortionists. Federal investigators used advanced computer tracking tools to trace his hidden cryptocurrency transactions and federal prosecutors filed formal extortion charges against Martino in southern Florida.

The defendant pleaded guilty to conspiracy charges after facing overwhelming digital evidence – besides sending Martino to federal prison, the judge ordered complete asset forfeiture.

The success of asset seizures has been demonstrated in other cases, authorities seized the AudiA6 crypto laundering service with the help of 11 countries. Authorities seized over ten million dollars in total property from the offender.

Government officers took control of several bank accounts and digital wallets holding millions in coins. Additionally, federal marshals confiscated a bayfront home, a secondary property, and luxury motorboats. The government even seized a food truck that Martino purchased using extortion money. 

Notably, regulatory updates demand that law enforcement strip criminals of all illegal gains. Stripping away illegal assets ensures that cybercriminals cannot profit from betraying corporate trust. Meanwhile, court officials scheduled future hearings to distribute recovered funds back to victimized companies.

Protective Measures Against Insider Threats in Corporate Networks

Considering the trend of cybercrime activities, it is important for businesses to conduct stringent background checks and monitor all external consultants. Companies should never grant a single negotiator complete control over sensitive communication channels. Requiring multiple team members to approve negotiation decisions prevents rogue individuals from operating in secret.

It is important for organizations to protect their insurance coverage limits from public knowledge during cybersecurity events. Trying to keep policy information undisclosed can help organizations deter attackers from learning their policy limit.

Apart from that, it is crucial for organizations to use encrypted communication methods that ensure that every employee action is logged. This will make it possible for internal security teams to detect unauthorized information transfers.

Also, company boards should form independent committees that will be in charge of incident response. Third-party security companies must regularly check the entire chain of third-party vendor relationships. It is essential for business leaders to ensure that the consultants they worked with apply ethical standards of behavior in restoring order after any incident.

Share This Article
Facebook Email Copy Link
ByThe OnionWiki Team
Follow:
The OnionWiki Team is a collective of cybersecurity and privacy advocates behind the OnionWiki.com. We operate this resource to provide accurate, safety-focused information about the dark web, maintaining a strictly independent and ad-free platform for the community.
Leave a Comment Leave a Comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

LATEST ARTICLES

Cyber Negotiator Sentenced to Nearly Six Years for Aiding BlackCat Ransomware Group
July 21, 2026
Hacker Claims to be Selling Alleged Arizona Caregiver Training User Database
July 21, 2026
U.S. Charges Three in Alleged $3 Million Business Email Compromise Scheme
July 18, 2026
Romania Investigates Cyberattack After Land Registry Portal Goes Offline
July 18, 2026
Hacker Lists Sale of 95 Million Uber Eats User Records on Dark Web Forum
July 18, 2026

YOU MAY ALSO LIKE

UK Drops Plan to Restrict VPN Use After Privacy and Security Concerns

The UK government has decided not to move forward with its plan to restrict virtual private networks. After months of…

News
July 16, 2026

New STORM Malware Stealer Targets Windows Users With Password and Crypto Theft Capabilities

An anonymous internet forum actor is actively advertising a new Windows-based information stealer named STORM on underground dark web boards.…

News
July 16, 2026

New RedHook Malware Uses Android Wireless Debugging to Hijack Devices

The RedHook threat has evolved again. The new variant can exploit a native Android feature to get full control over…

News
July 13, 2026

Threat Actor Claims to Sell Alleged PagBank Merchant and Payment Data

A threat actor has claimed responsibility for an alleged cyberattack against PagBank, one of Brazil's largest digital payment providers. The…

News
July 13, 2026
OnionWiki Logo Main

For information and research purposes only. Read disclaimer.

  • What is Dark Web
  • Dark Web Dangers and Risks
  • Dark Web Marketplaces
  • Best Dark Web Sites
  • Browse Dark Web Safely
  • Best VPN for Dark Web
  • Best Private Browser
  • What is Tor Browser
  • Privacy Policy
  • Terms of Service
  • Donate
  • Contact Us

Explore. Learn. Stay Safe.

Be Cautious.

OnionWiki is a trusted dark web link directory, often referred to as the Hidden Wiki. It provides .onion addresses for search engines, news outlets, marketplaces, and other sites on the deep and dark web. Because we prioritize security and privacy above all, we advise users to exercise caution at all times, regardless of the site or part of the internet they are visiting.

Copyright © 2026 ⋅ All Rights Reserved ⋅ OnionWiki
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?