Tag: extortion
-
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A federal court in Brooklyn has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for using ransomware to extort millions of dollars from victims. The U.S. Attorney’s Office for…
-
Japan’s GMO Group Offers $1M Bounty for Hacker’s Identity
Extortion Group Holding to Ransom Data Stolen From Virtual Private Server Customers. Japan’s GMO Internet Group is offering a bounty of up to $1 million for information that helps unmask whoever hacked the company’s infrastructure, gaining access to over 25,000 virtual private servers and infecting customers’ home PCs with data-stealing malware when they remotely connected.…
-
Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand.The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice.…
-
Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
University of New Mexico (UNM) Health Sciences Center (HSC), the academic medical arm of the University of New Mexico, has suffered a cyberattack that has temporarily … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/university-of-new-mexico-hospitals-cyberattack/
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Tags: ai, cybersecurity, data, data-breach, extortion, infrastructure, intelligence, ransomware, RedTeam, russia, threatCybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups.Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well…
-
New ScarlettGroup Extortion Gang Threatens to Leak Company Data Using Dark Web Countdown Timers
An emerging cyber-extortion operation named ScarlettGroup is using a Tor-based leak site and public countdown timers to pressure organizations over allegedly compromised data. Threat-monitoring records described in Foresiet’s research place its emergence around September 2026, with visibility increasing during October as alleged victim listings and underground forum activity attracted attention. Unlike conventional ransomware campaigns, ScarlettGroup’s…
-
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
US, UK and Germany Warn of Active SafePay Ransomware
Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days. U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and backup software vulnerabilities to steal data and encrypt systems, often within 24 hours of initial access. First seen on govinfosecurity.com Jump to article:…
-
Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly
Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a shift toward faster, more selective extortion, where attackers prioritize damaging disclosures rather than relying exclusively on file encryption. That represents a 275.8% annual increase. These figures establish the scale of theft,…
-
FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers
Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19. Sources familiar with the inquiry revealed that an executive from an unnamed U.S. consulting company allegedly assisted in operating the group’s victim extortion website. This…
-
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations. First seen on hackread.com Jump to article: hackread.com/us-ransomware-negotiator-shinyhunters-extort-victims/
-
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ransomware-threats-physical/
-
Frustrated Ransomware Gangs Turn to Real World Threats
Tags: business, cyber, cybersecurity, defense, extortion, hacker, identity, ransomware, resilience, threatRansomware Hackers Discover Violence as Digital Defenses Stymie Extortion. Ransomware gangs are turning to real world threats against business executives and even their families, to gain an edge in negotiations as enterprises boost their cyber resilience and become less willing to pay extortion, finds a survey commissioned by identity-centered cybersecurity firm Semperis First seen on…
-
Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate
Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence to enhance their attacks, according to the Semperis 2026 Ransomware Risk Report. Among the surveyed victims, 37% reported threats against their family members or friends, while 84% experienced attacks that involved AI in some form. The findings…
-
ShinyHunters arrest number three: a Canadian ransomware negotiator
A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown. Here’s what is known, and what isn’t. ShinyHunters is the focus of a global FBI investigation, and the crackdown has led to the October 8 arrest of a Canadian ransomware negotiator who now faces extortion charges. Reuters reported the arrest, citing court documents,…
-
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money. First seen on darkreading.com Jump to article: www.darkreading.com/insider-threats/prominent-ransomware-negotiator-extortion-charges
-
Canadian Ransomware Negotiator Arrested in FBI Breach Probe
Man Charged With Cyber Conspiracy and Extortion as FBI Investigates ShinyHunters. Canadian ransomware negotiation expert Edward Dobrovsky, 54, has been named as the suspect recently arrested as part of the FBI’s crackdown on the ShinyHunters cyberextortion collective, after it breached law enforcement agency systems and stole personal information pertaining to employees. First seen on govinfosecurity.com…
-
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
Federal Bureau of Investigation (FBI) agents arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026. This arrest is part of an investigation into alleged assistance to the ShinyHunters cybercrime group, according to KrebsOnSecurity. The case involves accusations of cyber extortion and conspiracy; however, the complaint remains largely sealed, so the specific allegations…
-
FBI Arrests Canadian Cybersecurity Executive in ShinyHunters-Linked Cybercrime Investigation
Federal Bureau of Investigation (FBI) agents arrested Canadian cybersecurity executive Edward Dubrovsky in Pennsylvania on October 8, 2026. This arrest is part of an investigation into alleged assistance to the ShinyHunters cybercrime group, according to KrebsOnSecurity. The case involves accusations of cyber extortion and conspiracy; however, the complaint remains largely sealed, so the specific allegations…
-
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/
-
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/
-
Canadian cybersecurity executive arrested in federal extortion case
Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems. First seen on cyberscoop.com Jump to article: cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/
-
Suspected ShinyHunters Extortion Hacker Arrested by FBI
FBI Vows to Dismantle Hacking Group After It Stole FBI Personnel Data. The FBI announced Friday the arrest of a suspected hacker behind the breach of a bureau HR system, marking the second recent detention of an alleged member of the ShunyHunters extortion group. The suspect, arrested earlier week in Pennsylvania, is a Canadian citizen.…
-
FBI arrests another suspected ShinyHunters hacker after agency breach
The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/
-
Leader of 764 pleads guilty, faces up to 30 years in prison
Prasan Nepal ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the grooming, manipulation and extortion of minors. First seen on cyberscoop.com Jump to article: cyberscoop.com/764-leader-prasan-nepal-guilty/
-
Leader of 764 pleads guilty, faces up to 30 years in prison
Prasan Nepal ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the grooming, manipulation and extortion of minors. First seen on cyberscoop.com Jump to article: cyberscoop.com/764-leader-prasan-nepal-guilty/
-
Ransomware Response Firm CEO Accused of Data Recovery Fraud
MonsterCloud CEO Disguised Ransom Payments as Proprietary Tool, Say Prosecutors. A ransomware service that offered clients an extortion-free shortcut to unlocking their files was too good to be true, say U.S. federal prosecutors who say the secret behind Florida-based MonsterCloud was actually succumbing to hacker demands and paying a ransom to attackers, at victims’ expense.…
-
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
In leaked chats, members track dozens of victims, haggle over multimillion-dollar payments and direct operatives based in the United States whom they call “agents.” First seen on therecord.media Jump to article: therecord.media/leaked-chats-show-russian-extortion-gang-sending-agents-to-law-firms
-
Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds
An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/affiliate-doublecrosses-raas/