conv.

All stories
SecurityActive today · day 4

FBI arrests ransomware negotiator Dubrovsky in ShinyHunters probe

A Canadian executive who negotiates ransom payments for hacking victims is charged with extortion-related offenses as the FBI investigates a breach of its own employee data.

What to know

  • Edward Dubrovsky, a Canadian ransomware negotiator affiliated with CyberSteward, was arrested in Pennsylvania on federal extortion-related charges tied to a sealed Texas case.
  • The arrest comes amid an FBI crackdown on ShinyHunters, a hacking group that claims to have stolen data on nearly every FBI employee via the agency's jobs website.
  • FBI Director Kash Patel says agents have arrested another suspected ShinyHunters co-conspirator in recent days, without confirming whether it is Dubrovsky.
  • Authorities have not publicly confirmed a connection between Dubrovsky's case and the FBI data-theft investigation; the underlying charges remain sealed.

Edward Dubrovsky Ransomware negotiation executive, CyberStewardKash PatelKash Patel FBI DirectorShinyHunters Hacking group under FBI investigation

FBI arrests ransomware negotiator Dubrovsky in ShinyHunters probe
NY Post

How it unfolded 3 developments, newest first · click a bar or a number to jump articlesposts

Peak 3 pieces in one hour at Oct 10, 9 PM; 9 pieces over 4 days (6 articles · 3 posts) Oct 9, 7 PM — 1 piece · 1 article — Google News 1Oct 9, 8 PM — quietOct 9, 9 PM — quietOct 9, 10 PM — quietOct 9, 11 PM — quietOct 10, 12 AM — quietOct 10, 1 AM — quietOct 10, 2 AM — quietOct 10, 3 AM — quietOct 10, 4 AM — quietOct 10, 5 AM — quietOct 10, 6 AM — quietOct 10, 7 AM — quietOct 10, 8 AM — quietOct 10, 9 AM — quietOct 10, 10 AM — quietOct 10, 11 AM — quietOct 10, 12 PM — quietOct 10, 1 PM — quietOct 10, 2 PM — quietOct 10, 3 PM — quietOct 10, 4 PM — quietOct 10, 5 PM — quietOct 10, 6 PM — quietOct 10, 7 PM — quietOct 10, 8 PM — quietOct 10, 9 PM — 3 pieces · 3 articles — Google News 3Oct 10, 10 PM — quietOct 10, 11 PM — quietOct 11, 12 AM — quietOct 11, 1 AM — quietOct 11, 2 AM — quietOct 11, 3 AM — quietOct 11, 4 AM — quietOct 11, 5 AM — quietOct 11, 6 AM — quietOct 11, 7 AM — quietOct 11, 8 AM — quietOct 11, 9 AM — quietOct 11, 10 AM — quietOct 11, 11 AM — quietOct 11, 12 PM — quietOct 11, 1 PM — quietOct 11, 2 PM — quietOct 11, 3 PM — quietOct 11, 4 PM — quietOct 11, 5 PM — quietOct 11, 6 PM — 2 pieces · 2 articles — Google News 1, Newswires 1Oct 11, 7 PM — quietOct 11, 8 PM — quietOct 11, 9 PM — quietOct 11, 10 PM — quietOct 11, 11 PM — quietOct 12, 12 AM — quietOct 12, 1 AM — quietOct 12, 2 AM — quietOct 12, 3 AM — quietOct 12, 4 AM — quietOct 12, 5 AM — quietOct 12, 6 AM — quietOct 12, 7 AM — quietOct 12, 8 AM — quietOct 12, 9 AM — quietOct 12, 10 AM — quietOct 12, 11 AM — quietOct 12, 12 PM — quietOct 12, 1 PM — quietOct 12, 2 PM — quietOct 12, 3 PM — quietOct 12, 4 PM — quietOct 12, 5 PM — quietOct 12, 6 PM — quietOct 12, 7 PM — quietOct 12, 8 PM — quietOct 12, 9 PM — quietOct 12, 10 PM — quietOct 12, 11 PM — quietYesterday, 12 AM — quietYesterday, 1 AM — quietYesterday, 2 AM — quietYesterday, 3 AM — quietYesterday, 4 AM — 1 piece · 1 post — Mastodon 1Yesterday, 5 AM — quietYesterday, 6 AM — quietYesterday, 7 AM — quietYesterday, 8 AM — quietYesterday, 9 AM — quietYesterday, 10 AM — quietYesterday, 11 AM — 1 piece · 1 post — Reddit 1Yesterday, 12 PM — 1 piece · 1 post — Reddit 1Yesterday, 1 PM — quietYesterday, 2 PM — quietYesterday, 3 PM — quietYesterday, 4 PM — quietYesterday, 5 PM — quietYesterday, 6 PM — quietYesterday, 7 PM — quietYesterday, 8 PM — quietYesterday, 9 PM — quietYesterday, 10 PM — quietYesterday, 11 PM — quietToday, 12 AM — quiet 123
Oct 10Oct 11Oct 12yesterdaynow · 1:47 AM ET
  1. 3

    Online commentary flags pattern of negotiator arrests

    A social media post characterized the case as part of a string of recent arrests or convictions of ransomware negotiators allegedly tied to ShinyHunters.

    “Whitehats (allegedly) gone wild. Allegations of direct involvement with shinyhunters. This is the third or fourth arrest or conviction of a ransomware negotiatior in the last few weeks.”
    — realhackhistory@chaos.social
    • Whitehats (allegedly) gone wild. Allegations of direct involvement with shinyhunters. This is the third or fourth arrest or conviction of a ransomware negotiatior in the last few weeks. https://www. cbc.ca/player/play/video/9.737 8218

      realhackhistory@chaos.socialMastodon20h agoview on Mastodon ↗
  2. 2

    Reports detail charges and Dubrovsky's CyberSteward ties

    Follow-up reporting (Reuters, Fox Business, The Globe and Mail, NY Post) detailed charges of conspiracy to threaten confidentiality of information to extort money and interference with commerce, and identified Dubrovsky's affiliation with CyberSteward, a firm advertising ransom negotiation and extortion-settlement services.

    “Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor…”
    — Kash Patel, FBI Director · source
  3. 1 day quiet
  4. 1

    Krebs on Security first reports the arrest publicly

    Krebs on Security published the first report naming an executive at a ransomware negotiation firm as having been arrested by the FBI.

    1. first by Krebs on Security, 4d ago

  5. background

    FBI Director Patel announces arrest of ShinyHunters co-conspirator — Patel posted on X that agents arrested another suspected co-conspirator of ShinyHunters, the group believed responsible for the recent FBIjobs.gov breach on a third-party vendor platform, without naming the suspect.

  6. background

    Marshals ordered to transport Dubrovsky to Texas — A separate court order issued Friday directed the US Marshals Service to transport Dubrovsky to the Eastern District of Texas for further proceedings; he was listed at the Federal Detention Center in Philadelphia.

  7. background

    Judge orders Dubrovsky detained pending Texas hearing — A federal court order issued the same Thursday shows prosecutors sought detention and a judge ordered Dubrovsky held pending a detention hearing in the Eastern District of Texas, where the underlying case is sealed.

  8. background

    FBI arrests negotiator Edward Dubrovsky in Pennsylvania — Dubrovsky, 54, a Canadian cybersecurity executive who negotiates with ransomware hackers, was arrested Thursday in the Philadelphia area on federal charges filed in the Eastern District of Pennsylvania.

Also covered reported alongside — the timeline has no entry for these yet

  1. first by Reuters, 3d ago · also Fox Business, NY Post, New York Post

    2 more headlines

and 1 smaller piece