A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.
'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
Summary + source link. No paywalls, no tracking.