Today’s briefing covers 2 security issues reported in the last 24 hours, grouped by type: 2 arrests and takedowns. Each entry says who is affected and what to do, with links to the original reports.
Arrests and takedowns
FBI arrests Canadian ransomware negotiation executive linked to ShinyHunters case
Who is affected: An executive at a Canadian cybersecurity firm (named in the source as Cypfer) was arrested; the ShinyHunters group reportedly obtained sensitive data on thousands of FBI agents.
FBI agents arrested a Canadian man in Pennsylvania on cyber extortion and conspiracy charges in connection with an investigation into the ShinyHunters hacking group. According to court records reviewed, the defendant is charged with conspiracy to threaten to impair the confidentiality of information with intent to extort money. The arrest took place while the individual was reportedly attending a cyber insurance conference in Philadelphia.
What to do: Review any engagement or data-sharing arrangements with the firm named (Cypfer) and with former personnel now at CyberSteward, and follow official guidance if any interaction with the ShinyHunters group is suspected.
Sources: krebsonsecurity.com
Empire Market co-creator Raheim Hamilton sentenced to 40 years
Who is affected: Users of the Empire Market dark web marketplace, where more than 4 million transactions totalling $430 million were conducted between 2018 and 2020.
Co-creator Raheim Hamilton, 30, was sentenced to 40 years in federal prison and fined $5 million after pleading guilty to a drug conspiracy charge. He agreed to forfeit more than $100 million in bitcoin and several Virginia properties. Co-defendant Thomas Pavey pleaded guilty last year and is scheduled for sentencing later this month.
What to do: Organisations that bought data or tools on Empire Market should treat any related credentials as compromised, reset affected passwords, and review logs for indicators of access tied to marketplace transactions.
Sources: therecord.media