The Federal Bureau of Investigation has issued a public warning to the ShinyHunters cybercrime group, urging remaining members to surrender following the arrest of an alleged leader in the Netherlands. Brett Leatherman, Assistant Director of the FBI's Cyber Division, stated in a video message that the bureau is confident in its ability to locate the group, emphasizing that past groups who believed in anonymity or protection from associates were mistaken.
Leatherman suggested that the group's members have likely seen or heard information not yet public, implying that seized infrastructure and potential cooperation from arrested individuals could provide further leads. He advised them to initiate contact with the FBI while they still have the choice, stating, "The longer you stay in this, the more we learn about you."
The warning comes after Dutch National Police, with assistance from the FBI, arrested a 24-year-old individual described by the FBI as "one of the alleged leaders of ShinyHunters." The arrest was announced on a Tuesday, and police reported uncovering "a large amount of information" on the suspect's laptop, including details related to two alleged murder plots abroad, for which the suspect is indicated to have given orders. The FBI Director, Kash Patel, confirmed the bureau's assistance in the operation and stated that electronic devices were seized, with further investigations ongoing and more arrests possible.
Earlier in the week, ShinyHunters claimed responsibility for hacking the FBIJobs.gov portal. The group asserted that it had stolen sensitive personal information belonging to current, former, and prospective FBI employees. However, unlike their typical financially motivated data theft and extortion operations, a spokesperson for ShinyHunters stated that this particular intrusion was "NOT financially motivated."
The group's spokesperson indicated that the hack was intended to compel the FBI to "correct or retract their statements they made, which included substantial false allegations." In a subsequent interview, the spokesperson elaborated that the high-profile hack was an effort to protect ShinyHunters' reputation and maintain its "business," framing it as a competitive "game" in their operational environment.
