Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Federal investigators suspect executives at ransomware negotiation firms maintained covert ties to ShinyHunters, raising fundamental questions about trust in the incident-response vendor ecosystem enterprises rely on during crises.
Summary written by editorial AI · Source link below
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
Editorial Analysis
Enterprises that outsource ransom negotiations assume their advisors act in good faith; alleged collusion with threat actors shatters that assumption and creates legal, financial, and reputational exposure.
Conduct enhanced due diligence on all ransomware negotiation and incident-response retainer partners, including background checks and conflict-of-interest reviews.
Allegations that ransomware negotiation firms colluded with attackers undermine a critical element of enterprise crisis-response planning.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Krebs on Security in a new tab.
More from the Threat Intel Desk
- Hackers pull off $133 million French bank heist via service provider2d
- Fake security tools on GitHub push backdoors and infostealers3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)3d
- CEO-spoofing scammers used AI to help steal more than $100 million, feds say3d
- Chainalysis says breach exposed credentials for all customers3d