CriticalRansomware
FBI Arrests Executive at Ransomware Negotiation Firm
Krebs on Security·Source published ·1 min read
What happened?
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.
Key details
- FBI arrested a Canadian executive at a cybersecurity firm linked to ShinyHunters investigation.
- The suspect was attending a cyber insurance conference in Pennsylvania when arrested.
- The suspect's company specialized in ransomware negotiations with cybercrime groups.
- Case moved to Eastern District of Texas, now the epicenter of FBI's ShinyHunters investigation.
- ShinyHunters has extorted over $70 million from victims this year using phishing and stolen credentials.
- FBI seized devices from Dutch cybercriminal Pepijn van der Stap last month, may charge other ransomware negotiation firms.
Affected
- Cypfer, a Canadian security company and biggest sponsor of Cyber Risk Summit.
- CyberSteward, another Canadian security firm associated with Edward Dubrovsky.
What to look for
- ShinyHunters uses phishing and stolen credentials to steal data from SaaS companies.
- ShinyHunters member Rey taunted FBI over stolen recruitment portal data including medical records.
Summarised by SecOraLens from Krebs on Security. Always read the original source before acting. How SecOraLens verifies advisories.