What drives ShinyHunters, the group that claimed responsibility for hacking the FBI?
asserted
that → drive → FBI
The notorious hacking group is linked to dozens of major data breaches
The hacking group that claimed responsibility for stealing a massive trove of data from the FBI on Tuesday — including officials' job assignments, addresses and social security numbers — has been linked to dozens of cyberattacks targeting large companies and institutions.
asserted
that → link → companies
ShinyHunters has been active since at least 2019 and is known as one of the most prolific data theft and extortion groups, typically demanding ransom payments in exchange for not releasing the sensitive data it's obtained.
asserted
it → know → data
But in the case of the recent breach, which a former FBI operative called "foreign intelligence service goldmine," the group says it's not asking for money.
asserted
it → call → money
ShinyHunters is giving the FBI one week to remove or "correct" a report from May that makes claims about the group that it says are false.
uncertain
it → give → group
The FBI is investigating the breach and the FBIJobs.gov portal was still down Thursday afternoon.
asserted
portal → investigate → breach
The hacking group caused chaos at universities around the world in May, including in Canada, with a cyberattack on Canvas, an online learning-management system that connects millions of students with their instructors.
uncertain
that → cause → instructors
Here's what we do know about ShinyHunters.
asserted
we → know → ShinyHunters
ShinyHunters is a loose collection of young hackers in multiple countries, according to researchers who spoke to CBC News.
uncertain
who → accord → News
Cynthia Kaiser, head of Halcyon's Ransomware Research Center and former deputy assistant director of the FBI’s cyber division, says the group is made up of teenagers or people who "act like teenagers."
asserted
who → say → teenagers
"I think that ShinyHunters has historically demonstrated what would be seen as an immaturity with their communications — taunting of victims, doxxing of security researchers — actions that are really atypical of normal ransomware operations that run a lot more like businesses," she said.
asserted
she → think → businesses
Kaiser says this is highlighted by the group attacking the FBI the same week it attacked rival "ransomware gang" Cl0P, and speculates that this week's attacks could cause the group's downfall.
"When you're targeting law enforcement, you're essentially kicking a bee's nest and hoping nothing comes back out at you."
Sebastien Raoult, a French citizen who the U.S. Department of Justice says was a member of ShinyHunters, was arrested in Morocco in 2022 and extradited to the U.S. where he was sentenced in 2024 to three years in prison and ordered to pay more than $5 million US in restitution for wire fraud and aggravated identity theft.
uncertain
he → say → fraud
A cyberattack hit universities worldwide, including top Canadian schools.
asserted
cyberattack → hit → schools
Here's what we know
Telus probes cybersecurity incident that 'ShinyHunters' group claims responsibility for
Experts tell CBC News it's notable that members seem to be proficient English speakers, separating them from other ransomware groups that tend to be Russian.
uncertain
that → know → groups
Kaiser says ShinyHunters members overlap with other groups like Scattered Spider and LAPSUS$ — the three also claimed to work together last year in what cybersecurity analysts dubbed a "cybercrime superpgroup" — and the broader network includes members in the U.S., U.K. and Canada.
asserted
network → say → U.S.
Ian Lin, an ethical hacker and head of research and development at Toronto-based cybersecurity company Packetlabs, says it would be unwise for any organization to dismiss the threat that ShinyHunters poses, regardless of the way the group communicates publicly.
asserted
group → base → way
"They've shown incredible capability," Lin said.
asserted
Lin → show → capability
"We have to take them very seriously.
asserted
We → have → them
"
What do they want?
asserted
they → want → What
Lin, who hacks organizations to expose vulnerabilities and help them tighten their digital security, says ShinyHunters are chasing notoriety and fame, despite individual members being anonymous.
asserted
members → hack → notoriety
"Every time they compromise something, they really want a big bang," he said.
asserted
he → compromise → bang
Primarily, though, he says the group seems to be mostly financially motivated and not driven by a particular ideology or worldview.
asserted
group → say → ideology
"When there's leaders that can rally a group of people who grew up with AI, who grew with technology, and they're disillusioned by the system, the society, it's very easy for them to fall into these types of groups," he said.
"
asserted
he → be → groups
They have to live somehow.
asserted
They → have → ?
The FBI hack was unusual in the sense that it was not financially motivated, but a retaliation for several claims made by the law enforcement agency — including that ShinyHunters is known to threaten family members of its targets and threaten to release embarrassing or compromising images of its victims.
uncertain
ShinyHunters → motivate → victims
ShinyHunters denied ever using those tactics, in a public statement directed at the FBI.
asserted
ShinyHunters → deny → FBI
Chinese hackers disrupted U.S. Justice Department, NASA, Federal Reserve, U.S. says
Canadian investigation launched into data breach that exposed millions of IDs
asserted
that → disrupt → IDs
"This was to prove that they were right — that you have to listen to us," Lin said.
asserted
Lin → prove → us
ShinyHunters have been associated with high-profile cyberattacks affecting companies including Telus, Microsoft, Ticketmaster, Pornhub and Rockstar Games.
asserted
ShinyHunters → associate → Telus
Last year, according to U.K. media reports, ShinyHunters members claimed responsibility for the theft of more than two million records from the country's Legal Aid Agency and threatened to publish the information unless one of its members was freed.
uncertain
one → accord → members
The hack wreaked havoc on the legal system but the group did not follow through on its alleged threat after the deadline passed.
asserted
deadline → wreak → threat
Kaiser also says she has not tracked any specific ideological motive behind the group's actions, but says they have a penchant for picking "incredibly large" targets and wanting to show off what they can do.
asserted
they → say → what
"It's almost a more of a personal aggrandizing and being able to have those bragging rights," she said.
asserted
she → have → rights
"That seems to motivate just as much as the money."
asserted
That → seem → money
The Aporia
