Tag: ransomware operations
67 articles
FBI Disrupts ShinyHunters Extortion Group with Latest Arrest
The FBI has struck another blow against the notorious ShinyHunters extortion group with the arrest of a key suspect, bringing the group one step closer to being held accountable for their malicious actions. A Canadian citizen, considered a primary co-conspirator, was apprehended in Pennsylvania, although authorities have not yet disclosed the individual's name or specific charges.
Germany Seizes Alleged Qilin Ransomware Leader After Japan Extradition
In a stunning display of international cooperation, Japanese authorities detained a Russian national who arrived in the country as a tourist and subsequently extradited them to Germany to face charges related to the notorious Qilin ransomware. This joint effort between Japan and Germany marks a significant breakthrough in the fight against cybercrime.
Feds Charge Ransomware 'Fixer' with Defrauding Clients
Meet Zohar Pinhasi, a so-called ransomware "fixer" who's accused of running a brazen scheme that raked in over $19 million from desperate clients, with a simple twist: he paid just $8 million in ransoms, pocketing the rest.
ShinyHunters' Teen Ringleader Detained Amid Extortion Attempt
A teenager known as "Rey," suspected of leading ShinyHunters, has been detained in Amman, Jordan, and is cooperating with the FBI after the group allegedly attempted to extort a Boeing business unit. The group's exploits began with a PeopleSoft vulnerability, fueling a wave of data thefts.
Asos Snowflake Instance Targeted in Data Leak Threat
ASOS customers are reporting receiving alarming messages claiming that the company's Snowflake instance has been fully compromised, with hackers threatening to leak sensitive data unless they engage with them on Telegram. The rogue notifications specifically addressed ASOS's data protection and IT teams, demanding a response to avoid a potential data breach.
FBI Gains Leverage with ShinyHunters Suspect's Detention
The detention of Saif al-Din Khader, a suspected member of the notorious ShinyHunters extortion group, has given the FBI a crucial breakthrough in their international probe, with his cooperation expected to help track down other hackers. Khader, who goes by the online aliases "Rey" and "ReyXBF", was taken into custody in Jordan and is now working with authorities to bring down the group.
ShinyHunters Hacker Detained, Cooperates with FBI
A Jordanian suspect, known online as Rey, has been detained and is cooperating with the FBI in a significant breakthrough against the notorious ShinyHunters extortion operation. This development could be a major blow to the hackers, with the suspect's cooperation potentially leading to the arrest of others involved.
FBI Targets ShinyHunters with Takedown Warning
The FBI has issued a stark warning to the ShinyHunters gang: Brett Leatherman, assistant director for the Cyber Division, told members in a videotaped message that investigators are closing in and urged them to turn themselves in while they still can. The warning comes on the heels of a recent arrest by the Dutch National Police.
Ransomware Attack Disrupts Keio's Business Systems
Keio's business operations were disrupted after a ransomware attack was detected on its servers in the early hours of September 26, prompting swift action to shut down its network and prevent further damage. The company is now working closely with the police and external experts to investigate the incident and assess its impact.
ShinyHunters Breach FBI Systems, Exposes Agent Data
ShinyHunters hacked FBI systems to clear their name, not for financial gain, claiming the breach was a bold move to set the record straight and protect their business reputation. By exposing agent data, the group aimed to counter misinformation spread by the FBI and others.
FBI Data Breach Exposes Analysts' Roles in Surveillance
A massive data breach at the FBI has exposed sensitive information about intelligence and surveillance staff, including names, home addresses, phone numbers, and family details of around 5,000 employees. The breach was allegedly carried out by a hacker group called ShinyHunters, which threatened to release a staggering 2-3 terabytes of data unless its demands were met.
US Sentences Ryuk Ransomware Operator to 2 Years in Prison
Meet Karen Vardanyan, a 35-year-old Armenian national who was sentenced to 2 years in prison for his role in the notorious Ryuk ransomware scheme, after pleading guilty to computer fraud and conspiracy to commit fraud and extortion. He was also ordered to pay around $1.2 million in restitution to victims.
ShinyHunters Breach Exposes Sensitive FBI Agent Data
A brazen data breach by ShinyHunters has compromised highly sensitive information on nearly all FBI agents and job applicants, including personnel records. The group is demanding action from the bureau within a week, raising serious concerns about the security of critical government data.
ShinyHunters Breaches FBI, Exposes Employee Data in Dispute Over Gang's Tactics
In a shocking move, ShinyHunters breached FBI systems, exposing sensitive employee data, to pressure the agency to correct its public statements about the group's tactics. The hackers' surprising motive: not financial gain, but a demand for the FBI to retract its claims.
ShinyHunters Breaches Clop Ransomware Site, Threatens Extortion
In a stunning turn of events, the ShinyHunters group has breached the Clop ransomware gang's Tor leak site, leaving a cheeky message and ASCII art of Umbreon in its wake. The hackers boldly declared they'd been rooting the gang's systems since 2019.
Ukrainian Lawyer Turned Conti Coder Gets 4-Year Sentence
Meet Oleksii Oleksiyovych Lytvynenko, a Ukrainian lawyer-turned-ransomware coder who traded in his law books for a life of cybercrime as a key player in the notorious Conti operation, and ultimately paid the price with a four-year prison sentence. He was caught funneling thousands of dollars in cryptocurrency to his co-conspirators, including a $25,042 transfer that sealed his fate.
Conti Ransomware Operative Draws Four-Year Prison Sentence
A Ukrainian national has been sentenced to four years in prison for his role in the notorious Conti ransomware campaign, a significant blow to cybercrime after a cross-border prosecution effort. He was caught in Ireland in 2023 with a laptop running Cobalt Strike, and later extradited to the US to face charges.
US Justice System Targets Conti Ransomware Operative with 4-Year Sentence
In a major win for cybersecurity, a Ukrainian national has been sentenced to four years in prison for his role in the notorious Conti ransomware attacks that hit 47 states and 31 countries, causing over $150 million in estimated damages. Oleksii Lytvynenko, 44, pleaded guilty to conspiracy to commit wire fraud and was extradited to the US to face justice.
ShinyHunters Breaches Florida DMV Database
A massive data breach has hit the Florida DMV, with hackers allegedly stealing over 200,000 driver records from the state's database after exploiting a password-reset flaw. The breach, which began on September 3rd, has been claimed by the notorious extortion gang ShinyHunters, who are now threatening to release the sensitive information unless they're paid.
Aurora Ransomware Operators Leverage AI Tool Cursor in Targeted Attacks
Aurora ransomware operators are using AI tool Cursor to plan and execute targeted attacks, even going so far as to instruct it in Russian to exclude certain regions and domains. This sophisticated approach has enabled the group to breach over 20 organizations across nine countries in just a few months.
Rockstar Games Leak Exposes Insider Threat Risks
The leak of Grand Theft Auto VI footage by CyberLeek has highlighted the devastating risks of insider threats, where stolen IP can destroy the hard work and livelihoods of employees and companies. This breach has exposed a gaping hole between traditional copyright enforcement and the evolving tactics of threat actors.
US Bank Probes LockBit Ransomware Claim, Faces Data Leak Deadline
US Bank is investigating a potential cybersecurity incident after LockBit ransomware crew claimed to have breached the institution and stolen sensitive data. The bank has assured that there's currently no indication of internal system impacts or unauthorized network access.
Ransomware Affiliate Exploits Fellow Extortionists with 'Recovery' Scam
In a shocking twist, a ransomware affiliate is turning the tables on its own gang by posing as a recovery service, offering victims a way out for a fraction of the original ransom demand. The scammer, operating under the guise of "Ransom Busters," claims to have infiltrated the ransomware gangs' infrastructure and recovered stolen data.
Clop Ransomware Operation Exploits Windchill Flaw with Custom Web Shell
The Clop ransomware operation has exploited a critical flaw in PTC Windchill and FlexPLM servers, deploying a custom web shell that allows for easy credential theft and massive data exfiltration. This sneaky move gives attackers a direct path to sensitive data, with no extra tools needed.