“MonsterCloud allegedly charged customers far more than the ransoms it paid.”
MonsterCloud sold proprietary decryption. Prosecutors say the proprietary tool was paying the attackers and marking it up. One victim paid about $150,000 for a key that cost $8,200. ProPublica flagged this exact business model in 2019, and the scheme allegedly ran four more years.