FBI probes alleged ShinyHunters ties to ransom negotiators
Original title: FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers
Canadian executive Edward Dubrovsky was arrested and charged with extortion; an unnamed U.S. firm’s executive is also suspected, with no charges yet.
KrebsOnSecurity reported that FBI investigators examining ShinyHunters found suspected links to ransomware negotiators after the September 15 arrest of Pepijn van der Stap in the Netherlands. Sources say his accessible Signal account showed contact with Canadian executive Edward Dubrovsky and at least one executive at an unnamed U.S. consulting firm with more than 1,000 associates. Dubrovsky was later arrested and charged with threatening to disclose stolen information and extortion; those charges are allegations. Investigators also believe a U.S. executive helped run the shinywire.com extortion site, which listed nearly 100 organizations.
Unconfirmed: The U.S. executive and company are unnamed and uncharged; Dubrovsky’s charges are allegations, not findings of guilt.
- shinywire.com was described as active from about May 3 to October 16, 2026.
- Victims who did not respond within seven days risked publication on a Tor leak blog.
- A cached listing named Intuitive Surgical after a March 2026 phishing-credential incident.
- A late-September breach of fbijobs.gov reportedly stole medical, SSN, and personnel data.
- Cypfer said it does not facilitate ransom payments and did not know of the arrest.
Impact: Stolen data used to pressure victims into payments
- ATT&CK
- T1566 Phishing
- Threat actors
- ShinyHunters
- Victims
- Intuitive Surgical
- Organizations
- FBICypferCyberStewardCoveware
- Countries
- United StatesNetherlandsCanadaJordan
From the original article
3 min read at gbhackers.com
Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19. Sources familiar with the inquiry revealed that an executive from an unnamed U. S.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.