Dutch police arrest 'security pro' in ShinyHunters probe

Dutch police have arrested a 24-year-old man on suspicion of involvement with the prolific ShinyHunters cybercrime group. Cops announced the arrest on Monday night and said the Amsterdam resident would appear before judges at Rotterdam District Court today (Tuesday). Officers have not named the suspect. However, a company has identified a person they believe to be the suspect as working for them as an offensive security lead. Dutch broadcaster RTL and other newswires have also published a name. The Register chooses not to do so until a name is officially released by law enforcement. Authorities have not disclosed what conduct he is suspected of or identified any attacks allegedly involving him. The timing has focused attention on the investigation into the February breach of Dutch telco Odido, which was claimed by ShinyHunters and affected 6.2 million customers. Police have not said whether the individual is suspected of participating in that attack or whether he is the caller heard in an audio recording released this month. Investigators said the Odido intrusion began when a Dutch-speaking caller posed as an IT colleague and persuaded a customer service employee to provide access to an internal system. Police released part of the call on September 8 and subsequently received 20 tips, including what they described as "some very interesting information that the investigation team can use moving forward." Reuters reports the suspect was arrested on September 15 and that forensic investigators visited an Amsterdam office to make the arrest that night. They said police deployed flashbang grenades during the operation, although the account does not make clear where they were used. The arrest came a week after the public appeal. The person the news reports named was convicted several years ago of hacking, data theft, and extortion, and sentenced to four years in prison, one year suspended. He subsequently returned to legitimate cybersecurity work. ShinyHunters denial that it is linked to the named individual comes days after it boasted of compromising an FBI recruitment system, exclusively telling The Register that it hacked the FBI to "protect our business." The move is part of an escalating run of attacks and extortion attempts attributed to the group. (R) Updated to add at 1425 UTC: Following the 24-year-old's hearing in Rotterdam on Tuesday, Dutch police are still witholding the man's name, despite wider reporting identifying an individual as the alleged suspected hacker. The police also dispelled any suggestion that the suspect they arrested is thought to have been involved in the hack on Dutch telco Odido. Politie's National Investigation and Intervention Unit and its High Tech Crime Team are heading up two separate investigations into the Amsterdam man: One related to his alleged involvement with ShinyHunters and another possible double-murder inquiry. After the man's arrest on September 15, police said on Tuesday that "a large amount of information was found on his laptop, including details about two murders that were to be committed abroad. "There are indications that the suspect gave the order for this." The suspect is being held in "complete isolation" while investigators work through the two separate cases. Stan Duijf, head of operations at Politie's National Investigations and Special Operations, said: "Arresting cybercrime suspects is an important intervention within our broad fight against it. The ShinyHunters group is responsible for a large number of national and international victims. It is good that we have been able to arrest a suspect in the investigation into this group." The FBI has not released an official statement alongside their Dutch counterparts, although director Kash Patel said the feds assisted Dutch investigators and are working to unearth additional leads. The gang claimed to The Reg in a message: "As we said last time the Dutch police are unskilled and incompetent. That individual has no association with us."