
Binance says ShinyHunters' 335 million-record sale claim looks like a scam
The group demanded $900,000 on November 4; Binance says the sample does not match how it stores data.
152 stories, newest first · one card per story

The group demanded $900,000 on November 4; Binance says the sample does not match how it stores data.

Have I Been Pwned confirmed 850,500 accounts with names emails and addresses exposed in the November 2025 Harvard breach.
ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.

Unauthenticated SSRF to the loopback-trusted admin hub yields code execution on PeopleTools 8.61 and 8.62.

A gateway request forgery can satisfy localhost trust checks and reach a file-write path to code execution.

The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.

Shared branding does not prove one gang; Flare treats original LAPSUS$ as defunct after September 2022.

Edward Dubrovsky was arrested October 8; sources say shinywire.com listed nearly 100 organizations through October 16.

Canadian executive Edward Dubrovsky was arrested and charged with extortion; an unnamed U.S. firm’s executive is also suspected, with no charges yet.

Sources say an unnamed US consulting executive helped run shinywire.com; that person has not been charged.

FBI arrested ransomware negotiator Edward Dubrovsky on extortion charges tied to ShinyHunters, which also stole FBI employee data.
The UK Legal Aid Agency says its 2025 cyberattack exposed records dating to 1978, including about 250,000 pre-2007 files.

Anthropic says criminals and state-linked actors used Claude agents to automate phishing, credential theft, and data theft.
Semperis survey finds 37% of ransomware cases include psychological or physical threats against staff and families.
SuspectFile reviews six years of ShinyHunters activity, but the excerpt lacks new incident details.
TFG London's Hobbs, Phase Eight, and Whistles brands are disrupted after an October 11 cyberattack.

FBI arrested Canadian negotiator Edward Dubrovsky on extortion charges in its ShinyHunters crackdown, the third recent detention.

Edward Dubrovsky, a prominent ransomware negotiator, was charged in Pennsylvania with extortion conspiracy.

Attackers exploited critical Atlassian flaw CVE-2026-21589 within hours, alongside arrests, malware updates, and certificate hijacks.
FBI arrested a suspect linked to ShinyHunters' September breach that exposed data on the FBI's own agents.

FBI arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania over alleged ShinyHunters extortion conspiracy.

FBI arrested Canadian expert Edward Dubrovsky over alleged ShinyHunters extortion, including an FBI systems intrusion.
FBI reported another ShinyHunters arrest after an FBI data breach, while Mythos found an exploited bug.

FBI arrested Canadian executive Edward Dubrovsky, alleging he conspired with ShinyHunters after the FBIjobs.gov breach.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views