Unprecedented blackmail: Hackers file a complaint against their victim for concealing an attack

In an unusual twist of cybercrime, the notorious hacker group ALPHV/BlackCat filed a complaint with the US Securities and Exchange Commission (SEC) on 15 November against one of their victims, MeridianLink. The hackers accuse the company, which specialises in digital solutions for financial institutions, of concealing a cyber attack and are seeking to exert unprecedented pressure to obtain the ransom demanded.

Background to the cyber attack : On 7 November, ALPHV launched an attack against MeridianLink, extracting crucial data from the company. Faced with an apparent lack of response from the victim, the hacker group opted for a radical approach and filed an official complaint. This tactic, combining blackmail and media pressure, raises questions about the limits of cybercriminals' audacity.

The ALPHV/BlackCat precedent: ALPHV/BlackCat are no strangers to cruel cybercriminal methods, as evidenced by their earlier disclosure of nude patient photos after hacking into a hospital. Their history of aggressive tactics adds a worrying dimension to this new initiative.

Legal blackmail : the complaint filed on the darknet is a first in the world of cybercrime. The hackers deliberately chose to go public, highlighting MeridianLink's alleged failure to inform the SEC in accordance with US law. This unprecedented audacity suggests an evolution in the blackmail methods employed by cybercriminals.

The threat of public unveiling : By leaking the complaint form on the darknet, the hackers also broadcast the SEC's automatic response, confirming receipt of the complaint. In an explicit ultimatum, the hackers gave MeridianLink 24 hours before publishing the stolen data in full. This threat underlines the intention to make the consequences of concealing a cyber attack more tangible for potential victims.

The bold move by ALPHV/BlackCat to combine legal action with media blackmail marks a new era in cybercrime. Businesses must remain vigilant in the face of these innovative tactics and rethink their strategies for preventing and responding to attacks. The balance between IT security and negotiating with hackers is becoming increasingly delicate, underlining the urgent need for greater protection in today's digital world.