extortion

美国联邦调查人员怀疑一家勒索谈判公司的高管协助ShinyHunters运营勒索网站，随着FBI招聘网站被入侵及多名嫌疑人被捕，该勒索集团的调查正加速推进。

FBI已逮捕加拿大网络安全公司Cypfer联合创始人Edward Dubrovsky，其涉嫌协助窃取FBI敏感数据的ShinyHunters黑客组织，被控网络勒索与共谋罪。

ShinyHunters leader 'Rey' (Saif Al-din Khader), a teenager from Amman, Jordan, was detained and is reportedly cooperating with the FBI after the group extorted Boeing spin-off Jeppesen ForeFlight, exploiting CVE-2026-35273 in Oracle PeopleSoft to breach victims including the FBI.

ASOS app users received push notifications apparently sent by hackers claiming to have fully compromised ASOS's Snowflake data instance, in an unusual public extortion attempt involving a new Telegram-based threat actor called Xuanye Group.

A U.S. Army soldier was sentenced to 70 months in prison for hacking into AT&T and Verizon, stealing data of over 100 million customers, and extorting the companies.

Two police chiefs in Hunan Shaoyang were dismissed for extorting a tech company boss of 100 million yuan in a VPN software development case.

This weekly update discusses the current state of cyber ransoms, highlighting how ransomware attacks are often conducted by inexperienced actors and the legal repercussions for breached companies.

Zscaler research finds ransomware gangs now target middle managers like 46-year-old IT managers instead of CEOs, exploiting business privileges to pressure ransom payments.

A 26-year-old Canadian man, Connor Riley Moucka, pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations via Snowflake, including stealing call and text records of more than 100 million AT&T customers.

Telegram CEO Pavel Durov claims an extortionist planted AI-modified CSAM in a public chat to get Telegram temporarily removed from Apple's App Store, warning that this creates a systemic risk for all user-generated content apps.

Troy Hunt's weekly update covers Instructure's 'pay or leak' deadline from ShinyHunters, with the company remaining silent and lawsuits being prepared.

A cybercrime group defaced Canvas's login page with a ransom demand after a data breach, disrupting schools and universities nationwide. The stolen data includes names, emails, and student IDs, with threats to leak data unless paid.