Ransom Busters group poses as recovery service to scam ransomware victims

Claims

What the coverage asserts, and how many sources carry each claim.

• [○ 1 SOURCE] Employment in call centers trails historical trends by 39% in the US and 33% in Canada due to automation.
• [● 2 SOURCES] The group claims to possess data associated with ransomware groups DragonForce, Settra, and Anubis. nationalcybersecurity.com · cybernoz.com
• [○ 1 SOURCE] The median ransom payment dropped 50% to $150,000 in Q2 2026. www.itvoice.in
• [○ 1 SOURCE] The average ransomware ransom payment rose 176% in Q2 2026 compared to Q1, reaching $1.88 million. www.itvoice.in
• [● 2 SOURCES] Ransom Busters offers to delete stolen data from criminal servers in exchange for payments between $20,000 and $60,000. nationalcybersecurity.com · cybernoz.com
• [○ 1 SOURCE] AI exposure is linked to a 0.2 point drag on annual headcount growth for entry-level roles in the US.
• [○ 1 SOURCE] The ransom payment rate fell to a record low, with only 15% of victims paying when data theft was involved. www.itvoice.in
• [○ 1 SOURCE] The group claims to have infiltrated the infrastructure of another criminal organization involved in malware distribution and has obtained access to data belonging to ransomware victims. nationalcybersecurity.com
• [○ 1 SOURCE] The group claims to have obtained decryption keys to unlock encrypted files. nationalcybersecurity.com
• [○ 1 SOURCE] A group known as ‘Ransom Busters’ is contacting ransomware victims via email. nationalcybersecurity.com
• [● 2 SOURCES] A group calling itself ‘Ransom Busters’ is contacting ransomware victims via email. nationalcybersecurity.com · cybernoz.com
• [○ 1 SOURCE] The suspected affiliate used SoftPerfect Network Scanner, s5cmd, and Remotely in observed attacks. cybernoz.com