GoKawiilFBI probe into ShinyHunters links negotiation firm executives to extortion site
Federal investigators tracking the ShinyHunters hacking group have identified executives at two ransomware negotiation firms who had unusually close contact with the gang, according to sources cited by KrebsOnSecurity. One U.S.-based executive is suspected of helping the group operate a website used to pressure victims into paying ransoms. The probe follows ShinyHunters' breach of the FBI's recruitment site and the arrest of alleged member Pepijn van der Stap in the Netherlands.
GoKawiil's interpretation of the reporting above, not reported fact.
If confirmed, the alleged involvement of negotiation-firm staff would suggest a troubling conflict of interest in an industry meant to help victims resist or manage extortion demands. The case could prompt scrutiny of how ransomware negotiators are vetted and regulated, especially as ShinyHunters is reported by the FBI to have extorted over $70 million this year. The rapid pace of arrests, including a teenage suspect reportedly cooperating with authorities, suggests investigators are moving quickly to dismantle the group's infrastructure before more damage occurs.
- Investigators have linked executives at two ransom negotiation firms to the ShinyHunters extortion group.
- One executive allegedly helped operate a site used to pressure victims into paying ransoms.
- The FBI has accelerated arrests following ShinyHunters' breach of its own recruitment website, fbijobs.gov.
Source: krebsonsecurity.com, 2026-10-19
Published there as: “Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.