extortion news
11 stories
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
Reports indicate that an individual identified as "Rey," a suspected member of the ShinyHunters digital extortion group, has been detained by authorities in Jordan. This individual, reportedly named Saif al-Din Khader, is said to be cooperating with the FBI in efforts to identify other members of the cybercrime organization. This detention marks a significant development in ongoing law…
FBI tells ShinyHunters members to turn themselves in after recent arrest
The FBI has issued a public warning to members of the ShinyHunters extortion group, urging them to surrender following the arrest of an alleged leader by Dutch police. Brett Leatherman, Assistant Director of the FBI's Cyber Division, stated in a video released Tuesday that the Dutch National Police apprehended a 24-year-old man from Amsterdam on September 15. This individual is suspected of…
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
The Cl0p ransomware group claims to have compromised over 40 organizations by exploiting a critical vulnerability in PTC's Windchill and FlexPLM product lifecycle management (PLM) software. This vulnerability, identified as CVE-2026-12569, is a remote code execution (RCE) flaw with a CVSS score of 9.3, stemming from the deserialization of untrusted data. It affects all CPS versions and…
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is reportedly posing as a recovery service called "Ransom Busters," contacting victims of cyberattacks before the incidents become public. This group claims to possess decryption keys and the ability to delete stolen data for a fee, ranging from $20,000 to $60,000.
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A new entity calling itself "Ransom Busters" has reportedly begun contacting victims of ransomware attacks, asserting that it has successfully breached the servers of various ransomware groups. Ransom Busters is subsequently offering to delete the data stolen by these ransomware groups for a fee, which reportedly ranges from $20,000 to $60,000. This development introduces a novel layer to the…
ExfilSquad Confirmed to Possess Data From 13 Organizations
The ExfilSquad data extortion group has been confirmed by researchers to possess sensitive data from at least 13 organizations, spanning government, education, financial services, and manufacturing sectors. The group, which first appeared on July 26, initially claimed to have exfiltrated data from 15 entities. On August 7, data dumps for 13 of these victims were published via torrents,…
Uber Freight Investigates Data Breach After Extortion Group Claims Attack
Uber Freight is investigating a data security incident after the Helix extortion group claimed to have stolen nearly 1 million files from the logistics company. Helix listed Uber Freight on its data leak site on August 6, alleging compromise of mailboxes, OneDrive accounts, and accounts receivable data, among other repositories.
Ransom Cartel Creator Sentenced to 16 Years for Extortion Scheme
A Belarusian national, Maksim Silnikau, has been sentenced to 16 years in prison for his role in creating and operating the Ransom Cartel ransomware scheme. The 40-year-old, also known by the aliases J.P. Morgan, xxx, and lansky, was found to have participated in cybercrime activities since at least 2005, including membership in the cybercrime forum Direct Connection from 2011 to 2016.
Abbott Investigates Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is currently investigating two distinct cybersecurity incidents, one of which the company has confirmed involved unauthorized access to internal systems within its Cancer Diagnostics business. The second incident involves claims by a separate threat actor regarding a breach of the company's LabCentral customer portal.
Accenture Confirms Security Incident After Hacker Claims 35GB Source-Code Theft
Accenture has confirmed it is investigating a security incident after a cybercriminal put what they describe as a large trove of the company's internal data up for sale. The consulting and technology firm said it is aware of the matter and has already dealt with its source, but it has not confirmed that any data was actually taken.
County Government Reportedly Paid $1 Million to Cyber Extortion Group
A county government in Ohio has reportedly paid a $1 million ransom to a cyber extortion group. The payment was made to prevent the public disclosure of sensitive data that was stolen during a recent cyberattack.