25 casos · pág. 1/2
A 28-year-old Russian man, identified by German media only as "Vladimir K", has been arrested in Germany on suspicion of being a key member of the Qilin ransomware gang. He was first detained in Japan in May while on holiday and was extradited to Germany earlier this month. German investigators are examining possible links between him and…
Dutch police arrested a 24-year-old Amsterdam man on September 15 on suspicion of playing a role in the ShinyHunters criminal organisation. Police have not named him, but Brian Krebs identified him as Pepijn van der Stap, a convicted hacker. A search of his laptop reportedly turned up details of two murders "to be committed abroad", which…
N0n is a newly emerged cyber extortion group first spotted in mid-September 2026. Within days it had published details of what it claimed were around a dozen victims on its dark web leak site, and the tally has continued to grow. The source is a short Fortra blog teaser by Graham Cluley that points to a fuller article. The teaser gives no…
The leaker CyberLeek, behind a series of leaks of Rockstar Games' upcoming Grand Theft Auto 6, has threatened to publish a complete, playable build of the game. The threat followed the release of about 25 minutes of new footage, which Eurogamer reviewed and judged to appear legitimate, noting it carried CyberLeek's emblem. Instead of dema…
Krybit is described as a fast-growing ransomware group that was reportedly hacked by a rival gang, retaliated, and is still extorting victims. The source is a short Fortra blog teaser by Graham Cluley, which points to a fuller article covering how the group operates, who it has targeted and how organisations can protect themselves. The te…
In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase recor…
In Weekly Update 516, Troy Hunt comments on the Brinks Home incident, in which the company is the target of criminal extortion. He criticizes the company's FAQ as so heavily lawyered that it fails to answer basic incident response questions. Hunt describes a common breach pattern: attackers obtain data by vishing a target and abusing OAut…
Troy Hunt of Have I Been Pwned (HIBP) analysed the leak that ShinyHunters attributed to Carhartt. The leak was claimed to hold more than 50 GB of customer and employee records. The initial extraction showed 24,876,077 unique email addresses. Closer review showed that a large share came from the TPC-DS benchmark dataset (tpcdssf1000) store…
Edward Dubrovsky, a longtime cybersecurity executive described by Dark Reading as a prominent ransomware negotiator, was arrested and charged in Pennsylvania last week with conspiracy to extort money. The available article text is a brief summary and does not describe the alleged scheme, the victims, the amounts involved or any link to sp…
Organizations are reporting that ransomware operators are escalating extortion with threats of stalking, physical violence and abduction aimed at employees. The article says these claims are difficult to verify. The reports point to a possible shift toward real-world intimidation of staff and their families as pressure during extortion. T…
A court in Zurich sentenced an unnamed 52-year-old Ukrainian man to 12 years and nine months in prison and banned him from Switzerland for ten years. The court found him to be the lead developer of the LockerGoga, MegaCortex and Nefilim ransomware families. Victims include Norsk Hydro, Stadler Rail (500 GB stolen in 2020, reported US $6 m…
In July 2026, the cloud-based business communications platform RingCentral was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed to have obtained from the platform, covering 1.6M unique email addresses along with names, physical addresses and phone numbers. RingCentral stated in …
In August 2026, clothing retailer Carhartt was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published data allegedly taken from the company, including 12.9M unique email addresses, names, phone numbers and physical addresses. The leaked corpus also held millions of synthetic records unrelated to real individuals,…
In August 2026, French intellectual property software and services company Questel was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published a large corpus of data it claimed to have taken from the company. The data is largely corporate contact information tied to sales leads, support cases and marketing activit…
In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset …
In August 2026, data centre operator CyrusOne was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data allegedly stolen from the company, covering about 373k unique email addresses across records for users, sales leads and CyrusOne employees. The data is mostly corporate contact information, and also …
In January 2026, the company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly stolen from the company was later published, covering about 560k unique email addresses, mostly belonging to leads and business contacts. Crunchbase subsequently confirmed that a threat actor had exf…
In August 2026, the food and animal safety company Neogen was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed to have obtained from Neogen. The data consists largely of corporate contact records and includes 436k unique email addresses drawn from mailing lists, employee records and oth…
In August 2026, the digital health company Sharecare was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consists of B2B sales and marketing records, including names, physical addresses…
U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…
