FBI arrests another suspected ShinyHunters member over the FBIjobs.gov breach
The New York Times reports that the suspect, a Canadian citizen, was arrested in Pennsylvania. At least two other suspected members have been detained in the past two weeks.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
FBI Director Kash Patel said on Friday that agents had arrested 'another suspected co-conspirator' of the ShinyHunters extortion group, which the bureau believes was responsible for the FBIjobs.gov breach. Patel called it the latest of several arrests 'in a matter of days' and said the FBI would keep working to dismantle what remains of the group and its associates. He did not name the suspect or say where the arrest happened. According to The New York Times, the suspect is a Canadian national who was arrested in Pennsylvania and is considered a primary co-conspirator. No charges have been made public. The group took over the FBIjobs.gov domain, defaced it, and stole sensitive data on nearly every FBI employee, according to The Record. ShinyHunters told BleepingComputer it got in through an alleged Oracle PeopleSoft zero-day and then moved into FBI-managed AWS GovCloud infrastructure, and claimed to have taken between 2TB and 3TB of data. Patel said the breach happened on a platform managed by a third-party vendor. Earlier, FBI sources told Reuters that Saif al-Din Khader was arrested in Jordan on September 28 and had agreed to cooperate with investigators.