Ransomware Negotiator Convicted for Aiding Extortion Gang

A Florida-based ransomware negotiator, identified as Marcus Thorne, was convicted this week for his involvement in aiding a notorious ransomware group known as 'ShadowNet' in extorting US companies. Thorne was found guilty on multiple counts, including conspiracy to commit wire fraud and money laundering, by a federal jury in the Southern District of New York.

Prosecutors presented evidence demonstrating that Thorne acted as a go-between for ShadowNet and its victims, facilitating ransom payments and advising companies on how to comply with the hackers' demands. Court documents revealed that Thorne received a percentage of the ransoms paid, with some estimates suggesting his earnings exceeded $500,000 over a two-year period. The conviction follows a lengthy investigation by the FBI's Cyber Division, which tracked communications and financial transactions linked to Thorne and ShadowNet.

The ShadowNet group has been responsible for numerous high-profile cyberattacks against businesses and critical infrastructure across the United States, including a significant breach at a major healthcare provider in 2023. Thorne's role was crucial in enabling the group to successfully extract payments by providing expertise in negotiation tactics and payment processing, thereby prolonging the impact of the attacks on victim organizations. His conviction marks a significant victory for law enforcement in combating cybercrime syndicates.

Thorne faces a maximum sentence of 20 years in prison for each count of wire fraud and money laundering. Sentencing is scheduled for September 15, 2024. The Department of Justice stated that this conviction sends a clear message to individuals who facilitate cybercriminal activities, emphasizing that such actions will be met with severe legal consequences. The investigation into other potential associates of ShadowNet is ongoing.