Canadian Cybersecurity Executive Arrested on Extortion Charges
On Thursday, federal authorities apprehended a Canadian cybersecurity executive in Pennsylvania, on allegations of conspiracy to engage in extortion, as revealed by federal court documents released on Friday.
Edward Dubrovsky, aged 54, previously served as the chief operating officer and founder of CYPFER, a company specializing in facilitating negotiations with ransomware attackers.
He faces charges related to conspiring to jeopardize the confidentiality of sensitive information with the intent to extort funds, constituting a breach of federal computer fraud statutes.
Additionally, he is charged with conspiring to execute Hobbs Act extortion, which entails employing threats to interfere with interstate commerce for financial gain. Further specifics regarding the case remain classified.
While the FBI has not publicly disclosed Dubrovsky’s arrest, this event appears to correlate with subsequent actions in the aftermath of the ShinyHunters’ infiltration of the FBI’s IT infrastructure, which compromised personal information of numerous bureau employees.
FBI Director Kash Patel indicated in a social media post that the bureau had taken into custody “another suspected co-conspirator” affiliated with the group, although he did not disclose the individual’s identity.
The New York Times reported on Friday that a Canadian national was arrested in Pennsylvania as part of this investigation.
Requests for further comments were met with direction to Patel’s social media announcement.
Dubrovsky’s LinkedIn profile details his engagement with CYPFER and his association with CyberSteward, a Toronto-based organization that assists victims of breaches in negotiating ransom demands.
In a recent development, Dubrovsky published a book focusing on strategies for navigating ransomware negotiations.
Neither Dubrovsky nor CYPFER responded to inquiries seeking comment.
The FBI breach has garnered significant attention, marking a troubling escalation by ShinyHunters, a notorious collective previously known for targeting major cloud services, healthcare entities, academic institutions, technology firms, retailers, and educational service providers.
This year alone, their victims have included prominent organizations such as Instructure, Salesforce, Snowflake, and McKesson.
Brett Leatherman, assistant director for cyber at the FBI, indicated that an analysis traced the breach back to a third-party platform, where a contractor failed to implement a crucial security patch issued for the system. Reuters reported that this contractor was affiliated with Accenture.
Since the breach became public, multiple individuals have been apprehended. In September, Dutch authorities captured a 24-year-old believed to have ties with ShinyHunters.
Furthermore, a teenager, identified by Reuters as Saif Al-din Khader, has also been detained and is reportedly assisting investigators.
Dubrovsky’s case docket indicates that the proceedings have been transferred to the Eastern District of Texas, where he will remain in custody until a detention hearing is scheduled.
Source link: Cyberscoop.com.
