CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

Ransom Busters: A Deceptive Extortion Scheme Targeting Ransomware Victims

August 18, 2026

Ransom Busters is a threat actor that contacts ransomware victims, claiming to have hacked ransomware servers and offering to delete stolen data for a fee of $20,000 to $60,000. Analysis suggests it is likely a ransomware affiliate running a scam, using tools like SoftPerfect Network Scanner, s5cmd, and Remotely, and creating backdoor accounts with the password 'Numlock!123'.