SecOraLens
CriticalRansomware

FBI Arrests Executive at Ransomware Negotiation Firm

Krebs on Security·Source published ·1 min read

What happened?

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.

Key details

  • Court records show the case was moved to the Eastern District of Texas, which sources say is now the center of the FBI's ShinyHunters investigation.
  • Dutch police arrested convicted cybercriminal Pepijn van der Stap last month in connection with the ShinyHunters investigation, and the FBI seized devices from that arrest.
  • Another ShinyHunters member known as 'Rey,' identified as teenager Saif Al-din Khader, was detained and is cooperating with FBI investigators.
  • Sources indicate charges against principals at other ransomware negotiation companies may be forthcoming as the investigation expands.

Affected

  • ShinyHunters hacking group and its members under active FBI investigation.

What to look for

  • Phishing and stolen credentials used to access corporate SaaS accounts for data theft.
  • Threats to publish stolen data online unless ransom is paid.
  • FBI recruitment portal data stolen, including agent units, specializations, medical and psychiatric records.

Summarised by SecOraLens from Krebs on Security. Always read the original source before acting. How SecOraLens verifies advisories.