Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Federal investigators suspect executives at ransomware negotiation firms maintained covert ties to ShinyHunters, raising fundamental questions about trust in the incident-response vendor ecosystem enterprises rely on during crises.
Summary written by editorial AI · Source link below
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
Editorial Analysis
Enterprises that outsource ransom negotiations assume their advisors act in good faith; alleged collusion with threat actors shatters that assumption and creates legal, financial, and reputational exposure.
Conduct enhanced due diligence on all ransomware negotiation and incident-response retainer partners, including background checks and conflict-of-interest reviews.
Allegations that ransomware negotiation firms colluded with attackers undermine a critical element of enterprise crisis-response planning.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Krebs on Security in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d