Cybersecurity News
Filters
Filtered by category: Krebs On Security, tag: cybercrime × Clear
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Matched: cryptocurrency, medical
U.S. federal investigators suspect executives at two ransomware negotiation firms had unusually close ties to the ShinyHunters hacking group, with one U.S.-based executive allegedly helping operate the group's victim extortion website. Canadian cybersecurity executive Edward Dubrovsky has been charged with extortion-related offenses. Investigators also identified connections to Daniel Tobok, linked to the alias "Ghostbyte," which appeared in communications from the Dharma ransomware group. ShinyHunters has extorted over $70 million this year.
U.K. Sanctions Cryptomus for RU Money Laundering
Matched: Australia, cryptocurrency
The U.K. sanctioned Cryptomus, a cryptocurrency platform accused of processing payments for ransomware, drug markets, cybercrime, and helping Russia evade financial restrictions. The sanctions freeze U.K.-held assets and bar British firms from doing business with it. Also targeted were VexPay, TokenSpot, and Tsunami Payments. Cryptomus, which has operated under multiple names including Certa Payments and now Heleket, processed over $7 billion since 2022. Analysts say sanctions are more effective than Canada's earlier $176 million fine, which proved unenforceable.
FBI Arrests Executive at Ransomware Negotiation Firm
Matched: medical
FBI agents arrested Edward Dubrovsky, a Canadian cybersecurity executive specializing in ransomware negotiations, in Pennsylvania on cyber extortion and conspiracy charges. Dubrovsky, associated with firms Cypfer and CyberSteward, was attending a cyber insurance conference when arrested. His case has been moved to Texas, the center of the FBI's investigation into ShinyHunters, a hacking group that has extorted over $70 million this year and recently stole sensitive FBI personnel data.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Matched: health, medical
A teenager from Amman, Jordan, suspected of leading ShinyHunters, was detained and is reportedly cooperating with the FBI. Saif Al-Din Khader, known as "Rey," was apprehended while the group was extorting Jeppesen ForeFlight, a former Boeing subsidiary, over allegedly stolen sensitive aviation data. Separately, Dutch cybercriminal Pepijn van der Stap faces new allegations of ordering murders abroad. Experts describe ShinyHunters as a franchise-style operation, with Rey accused of exploiting the brand's reputation after its original French members were arrested.
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Matched: Artificial Intelligence, Australia, health, medical
Dutch police arrested 24-year-old Pepijn van der Stap, a previously convicted hacker known as "Umbreon," on suspicion of involvement with the hacking group ShinyHunters. Van der Stap had served prison time for data theft and extortion, claimed rehabilitation, and worked in cybersecurity. Following his arrest, ShinyHunters escalated attacks, breaching the FBI's jobs site and extorting Russian ransomware group Cl0p. Investigators also suspect van der Stap may have ordered two murders abroad.
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
U.S. Army soldier Cameron Wagenius, 22, was sentenced to 70 months in prison and ordered to pay nearly $300,000 in restitution for hacking telecoms including AT&T and Verizon. Operating as "Kiberphant0m" while stationed in South Korea, he stole call and text metadata from over 100 million AT&T customers via Snowflake cloud storage breaches and extorted companies. Despite the massive scale, he earned only around $1,500. While awaiting sentencing, he was caught attempting to research prison network vulnerabilities using other inmates' email accounts to query AI tools.