38 casos · pág. 1/2
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and…
Dutch police arrested a 24-year-old Amsterdam man on September 15 on suspicion of playing a role in the ShinyHunters criminal organisation. Police have not named him, but Brian Krebs identified him as Pepijn van der Stap, a convicted hacker. A search of his laptop reportedly turned up details of two murders "to be committed abroad", which…
N0n is a newly emerged cyber extortion group first spotted in mid-September 2026. Within days it had published details of what it claimed were around a dozen victims on its dark web leak site, and the tally has continued to grow. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no…
The leaker CyberLeek, behind a series of leaks of Rockstar Games' upcoming Grand Theft Auto 6, has threatened to publish a complete, playable build of the game. The threat followed the release of about 25 minutes of new footage, which Eurogamer reviewed and judged to appear legitimate, noting it carried CyberLeek's emblem. Instead of dema…
Krybit is described as a fast-growing ransomware group that was reportedly hacked by a rival gang, retaliated, and is still extorting victims. The source is a short Fortra blog teaser by Graham Cluley, which points to a fuller article covering how the group operates, who it has targeted and how organisations can protect themselves. The te…
In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase recor…
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAut…
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
Troy Hunt of Have I Been Pwned (HIBP) analysed the leak that ShinyHunters attributed to Carhartt. The leak was claimed to hold more than 50 GB of customer and employee records. The initial extraction showed 24,876,077 unique email addresses. Closer review showed that a large share came from the TPC-DS benchmark dataset (tpcdssf1000) store…
Edward Dubrovsky, a longtime cybersecurity executive described by Dark Reading as a prominent ransomware negotiator, was arrested and charged in Pennsylvania last week with conspiracy to extort money. The available article text is a brief summary and does not describe the alleged scheme, the victims, the amounts involved or any link to sp…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
On October 6, 2026, ASOS app users received a push notification stating the company had been hacked, sent by attackers who gained access to third-party customer messaging platforms used by ASOS. The note, addressed to ASOS's DPO and IT team, claimed the Snowflake instance was "fully compromised" and threatened a leak unless ASOS engaged. …
A court in Zurich sentenced an unnamed 52-year-old Ukrainian man to 12 years and nine months in prison and banned him from Switzerland for ten years. The court found him to be the lead developer of the LockerGoga, MegaCortex and Nefilim ransomware families. Victims include Norsk Hydro, Stadler Rail (500 GB stolen in 2020, reported US $6 m…
The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…
In July 2026, the cloud-based business communications platform RingCentral was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed to have obtained from the platform, covering 1.6M unique email addresses along with names, physical addresses and phone numbers. RingCentral stated in …
In August 2026, clothing retailer Carhartt was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published data allegedly taken from the company, including 12.9M unique email addresses, names, phone numbers and physical addresses. The leaked corpus also held millions of synthetic records unrelated to real individuals,…
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published a substantial corpus of data allegedly taken from the company, including 6.4M unique email addresses alongside other personal and corporate attributes. The data relates to marketing campaign r…
In August 2026, French intellectual property software and services company Questel was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published a large corpus of data it claimed to have taken from the company. The data is largely corporate contact information tied to sales leads, support cases and marketing activit…
In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset …
In August 2026, data centre operator CyrusOne was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data allegedly stolen from the company, covering about 373k unique email addresses across records for users, sales leads and CyrusOne employees. The data is mostly corporate contact information, and also …
