FBI suspects consulting executive helped run ShinyHunters extortion site
Original title: FBI Suspects Cybersecurity Executive Helped ShinyHunters Run Extortion Website
Edward Dubrovsky was arrested October 8; sources say shinywire.com listed nearly 100 organizations through October 16.
Federal investigators suspect an unnamed executive at a large US consulting firm helped ShinyHunters run shinywire.com to pressure hacked companies into paying. The site reportedly listed nearly 100 organizations from about May 3 through October 16, 2026, showed stolen-file samples, and set a seven-day deadline before publication on a Tor leak site. Separately, the FBI arrested Canadian executive Edward Dubrovsky on October 8 in Pennsylvania; those allegations are unproven and are not said to include operating the site.
Unconfirmed: The unnamed executive has not been charged, reporting does not say Dubrovsky ran the site, and source claims are not court-tested evidence.
- KrebsOnSecurity withheld the executive’s name because no charges had been filed.
- Dubrovsky, 54, was committed to the Eastern District of Texas and ordered detained.
- Sources say Dutch police found Signal chats after arresting Pepijn van der Stap in September.
- The FBI attributes more than $70 million in 2026 payments to ShinyHunters, according to KrebsOnSecurity.
- ShinyHunters reportedly stole FBI recruitment-site records including Social Security numbers and medical details.
Impact: Stolen files used to pressure ransom payments
- 1.Do not pay or respond if contacted directly with ShinyHunters demands.
- 2.Preserve communications and report suspected activity through IC3 or an FBI field office.
- Threat actors
- ShinyHunters
- Victims
- FBI
- Countries
- United StatesCanadaNetherlands
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | shinywire.com | eral investigation continues into his conduct. The website, shinywire[.]com, reportedly operated from approximately May 3 through Oct |
From the original article
4 min read at cybersecuritynews.com
Federal investigators suspect an executive at a United States consulting firm helped ShinyHunters operate a website used to pressure hacked companies into paying ransom demands. The allegation raises questions about whether trusted ransomware advisers crossed from helping victims into supporting the criminals demanding payment for stolen data. The suspected website operator has not been publicly […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.