Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
BLUF
Investigators are probing whether trusted ransomware negotiators secretly aided ShinyHunters instead of helping victims.
NEWS
Sources say U.S. federal investigators pursuing the ShinyHunters hacking group have identified executives at two ransomware negotiation firms with unusually close ties to the extortion operation. One executive in the United States allegedly helped operate a website used to pressure victims into paying ransoms.
Why I Care
If true, this undermines trust in ransomware response services and could expose victims to further coercion, data leaks, or fraud. It also raises legal and reputational risks for organizations that rely on third-party negotiators during breaches.
Next Steps
Organizations should immediately review contracts and communications with ransomware negotiation firms, verify personnel backgrounds, and require independent oversight of any victim-facing extortion sites. Security leaders should report suspected misconduct to law enforcement and update incident response plans to include vetted alternates for negotiation support.
Source: Krebs on Security ·