Feds suspect ransom negotiator ran ShinyHunters extortion site(krebsonsecurity.com)
264 points by Bender 5 days ago | 138 comments
tl;dr: Federal investigators probing the ShinyHunters extortion group—which recently breached the FBI's recruitment site—believe executives at two ransomware negotiation firms had suspiciously close ties with the hackers, with one US executive allegedly helping operate the group's victim-shaming site "shinywire.com." Canadian cybersecurity executive Edward Dubrovsky was already arrested in October, and chat logs from arrested ShinyHunters member Pepijn van der Stap reportedly show negotiators knew about breaches before victims did. The case highlights conflicts of interest in an industry where negotiators often take a percentage of ransom payments, incentivizing larger payouts.
HN Discussion:
  • ↑Government cybersecurity incompetence persists years after major breaches like OPM
  • •Questions the incentive structure that would motivate negotiators to collude with hackers
  • ↑Classic protection racket scheme: create the problem then sell the solution
  • ~Most ransom negotiators are legitimate professionals being unfairly tarnished by bad actors
  • ↓Federal law enforcement leaks about suspects are often unreliable and harmful