actors/shinyhunters.htmlNews mentioning ShinyHuntersMon, 19 Oct 2026 12:28:44 GMT https://databreaches.net/2026/10/13/shinyhunters-six-years-of-cybercrime-expert-analysis-and-ransomware-group-perspectives/bwo738Tue, 13 Oct 2026 12:43:12 GMTDataBreaches.net. Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so…RansomwareAPT https://securityaffairs.com/200847/cyber-crime/shinyhunters-arrest-number-three-a-canadian-ransomware-negotiator.html5uiwb9Mon, 12 Oct 2026 21:26:12 GMTSecurity Affairs. A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown. Here’s what is known, and what isn’t. ShinyHunters is the focus of a global FBI investigation, and the crackdown has led to the October 8 arrest of a Canadian…RansomwareLaw & policyAPT https://thehackernews.com/2026/10/weekly-recap-helpdesk-0-days-rogue.htmlnaxpfhMon, 12 Oct 2026 15:16:26 GMTThe Hacker News. Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only part of the…VulnerabilityZero-dayRansomwareMalwareAILaw & policyAPT https://www.schneier.com/blog/archives/2026/10/fbi-arrests-suspect-in-fbi-hacking-case.htmlp6ghc6Mon, 12 Oct 2026 15:01:26 GMTSchneier on Security. In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster . Last week, the FBI arrested (alternate link ) someone associated with that crime.RansomwareLaw & policyAPT https://www.securityweek.com/ransomware-response-expert-arrested-in-shinyhunters-fbi-hack-probe/x2y5x4Mon, 12 Oct 2026 10:32:05 GMTSecurityWeek. The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.RansomwareLaw & policyAPT https://www.infosecurity-magazine.com/news/net-closes-shinyhunters-another/122coiuMon, 12 Oct 2026 10:00:00 GMTInfosecurity Magazine. The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHuntersRansomwareLaw & policyAPT https://news.risky.biz/risky-bulletin-shinyhunters-suspects-arrested-in-us-and-jordan/1q6i43zMon, 12 Oct 2026 02:54:42 GMTRisky Bulletin. In other news: Hackers breach TLD registrars to get Google certs; Qilin member arrested in Japan; Google suspends OSS VRP due to AI spam.RansomwareLaw & policyAPT https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/le2uvySat, 10 Oct 2026 15:07:54 GMTBleepingComputer. Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group. [...]RansomwareLaw & policyAPT https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/edjrghSat, 10 Oct 2026 13:35:50 GMTCyberScoop. Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems.RansomwareLaw & policyAPT https://databreaches.net/2026/10/10/fbi-announces-yet-another-arrest-allegedly-connected-to-the-fbi-jobs-hack/1r5xxttSat, 10 Oct 2026 11:57:52 GMTDataBreaches.net. The FBI is doing another victory dance after arresting someone they allege assisted ShinyHunters with the FBI Jobs attack. Brian Krebs reports: Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian…RansomwareLaw & policyAPT https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/15wcc9Sat, 10 Oct 2026 00:17:42 GMTKrebs on Security. Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of…RansomwareLaw & policyAPT https://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.html8benqaFri, 09 Oct 2026 17:45:26 GMTThe Hacker News. The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on…RansomwareLaw & policyAPT https://www.darkreading.com/identity-access-management-security/fbi-shinyhunters-claims-hack1o7854aFri, 09 Oct 2026 17:21:00 GMTDark Reading. In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.RansomwareLaw & policyAPT https://www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/14187fdFri, 09 Oct 2026 17:02:29 GMTBleepingComputer. The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday. [...]BreachRansomwareLaw & policyAPT https://therecord.media/shinyhunters-arrest-fbi-data-breach-investigation1lb9ltaFri, 09 Oct 2026 15:41:00 GMTThe Record. “We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate," FBI Director Kash Patel said.BreachRansomwareLaw & policyAPT https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/16lmba6Wed, 07 Oct 2026 13:48:45 GMTKrebs on Security. A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the…RansomwareLaw & policyAPT https://www.malwarebytes.com/blog/news/2026/10/another-shinyhunters-suspect-arrestednqa6rsWed, 07 Oct 2026 10:03:06 GMTMalwarebytes Labs. The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.ResearchRansomwareLaw & policyAPT https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/qjqea3Tue, 06 Oct 2026 14:15:00 GMTSecurityWeek (+1 more sources). The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.VulnerabilityBreachRansomwareLaw & policyAPT https://thehackernews.com/2026/10/fbi-removes-accenture-contractor-after.htmlgmbvpoTue, 06 Oct 2026 06:56:57 GMTThe Hacker News. The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing…VulnerabilityBreachRansomwareLaw & policyAPT https://therecord.media/alleged-shinyhunters-member-detained-jordan-fbiqho1owMon, 05 Oct 2026 19:15:00 GMTThe Record. Saif ‌al-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data.RansomwareLaw & policyAPT https://www.theregister.com/security/2026/10/05/fbi-confirms-multiple-arrests-related-to-shinyhunters-hack/5301178m023z3Mon, 05 Oct 2026 17:46:22 GMTThe Register. Another few bite the dustRansomwareLaw & policyAPT https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/b8v0riMon, 05 Oct 2026 07:16:53 GMTSecurityWeek. Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.RansomwareLaw & policyAPT https://securityaffairs.com/200338/cyber-crime/shinyhunters-suspect-detained-in-jordan-helps-fbi-track-down-the-group.html11fddl2Sun, 04 Oct 2026 13:41:21 GMTSecurity Affairs. A suspected ShinyHunters member arrested in Jordan is reportedly cooperating with the FBI, helping investigators track down the group. A suspected member of ShinyHunters, the group that claims to have stolen data on every FBI employee, was picked up in Jordan…RansomwareLaw & policyAPT https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.html1pbcyw1Sun, 04 Oct 2026 07:22:05 GMTThe Hacker News. A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name is Saif ‌al-Din…RansomwareLaw & policyAPT https://www.bleepingcomputer.com/news/security/shinyhunters-hacker-reportedly-detained-in-jordan-aiding-fbi/s4e8kySat, 03 Oct 2026 19:09:38 GMTBleepingComputer. A suspected ShinyHunters hacking group member known online as "Rey" has reportedly been detained in Jordan and is cooperating with the FBI to help locate other members of the extortion group. [...]RansomwareLaw & policyAPT https://databreaches.net/2026/10/03/shinyhunters-hacker-rey-allegedly-involved-in-fbi-data-theft-detained-in-jordan/vjvh3aSat, 03 Oct 2026 16:00:10 GMTDataBreaches.net. Jana Winter, Raphael Satter, and A.J. Vicens report: A key member of the ShinyHunters hacking group, ‌which claims to have stolen data on every FBI employee, was detained this week in Jordan, three people familiar with the matter told Reuters. Two of ​the…BreachRansomwareLaw & policyAPT https://www.securityweek.com/shinyhunters-defiant-after-fbi-calls-on-members-to-come-forward/qg46spWed, 30 Sep 2026 10:20:02 GMTSecurityWeek. In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.RansomwareLaw & policyAPT https://news.risky.biz/risky-bulletin-sanctions-force-cas-to-revoke-tls-certs-in-iran-russia/1oidysvWed, 30 Sep 2026 04:06:58 GMTRisky Bulletin. In other news: ShinyHunters member arrested in the Netherlands; Apple fixes iOS zero-day found by Meta; Citrix zero-days see mass exploitation within hours.Zero-dayRansomwareLaw & policyAPT https://www.bleepingcomputer.com/news/security/fbi-tells-shinyhunters-members-to-turn-themselves-in-after-recent-arrest/4e1j8sTue, 29 Sep 2026 20:09:55 GMTBleepingComputer. The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau described as one of the group's alleged leaders. [...]RansomwareLaw & policyAPT https://www.theregister.com/security/2026/09/29/fbi-to-shinyhunters-we-know-how-to-find-you/5299901mw47wvTue, 29 Sep 2026 19:38:33 GMTThe Register. Federal cops have 'a very particular set of skills'RansomwareLaw & policyAPT https://databreaches.net/2026/09/29/shocker-suspected-shinyhunters-member-charged-with-attempted-incitement-to-commit-two-murders/x92h2dTue, 29 Sep 2026 18:39:39 GMTDataBreaches.net. Anyone following the recent arrest of Pepijn van der Stap, the previously convicted hacker known as “Umbreon,” was likely shocked today when the prosecution announced that he was being charged with two counts of attempted incitement to murder. Here’s what we…RansomwareLaw & policyAPT https://techcrunch.com/2026/09/29/dutch-police-arrest-shinyhunters-hacker-accused-of-planning-two-murders/fzqvhTue, 29 Sep 2026 17:27:09 GMTTechCrunch Security. Dutch police said the hacker, arrested for being part of the ShinyHunters cybercriminal gang, had plans to organize the murder of two people on his laptop.RansomwareLaw & policyAPT https://cyberscoop.com/shinyhunters-alleged-leader-arrested-netherlands/1nbcfgnTue, 29 Sep 2026 15:32:19 GMTCyberScoop (+1 more sources). The arrest of a 24-year-old man in Amsterdam, which occurred a week before ShinyHunters hacked the FBI, marks a major turning point for law enforcement’s push to track down the group’s members.RansomwareLaw & policyAPT https://securityaffairs.com/199979/cyber-crime/24-year-old-arrested-in-dutch-investigation-into-shinyhunters.html1d4c7trTue, 29 Sep 2026 07:30:30 GMTSecurity Affairs. Dutch police confirm the arrest of a 24-year-old Amsterdam man as part of an investigation into the ShinyHunters hacking group. Dutch police confirmed this week that a 24-year-old man from Amsterdam was arrested earlier this month as part of an investigation…RansomwareLaw & policyAPT https://www.404media.co/fbi-hackers-say-they-wont-publish-massive-trove-of-fbi-employee-data/1b20b3tMon, 28 Sep 2026 19:17:06 GMT404 Media (+1 more sources). ShinyHunters, the group that stole data on “all FBI employees” including addresses and details on their spouses, told 404 Media on Monday “Since the very beginning we had made our decision that we would never publish this data. We have never intended to nor…RansomwareLaw & policyAPT https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/1n3xg2oMon, 28 Sep 2026 15:08:57 GMTKrebs on Security. Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters…RansomwareLaw & policyAPT https://cyberscoop.com/fbi-data-breach-shinyhunters-agent-safety-risk/4hcm7cMon, 28 Sep 2026 14:47:10 GMTCyberScoop. Cybercrime experts are stunned as ShinyHunters risks agent safety and intense federal heat in a bizarre attempt to force the retraction of an agency advisory.VulnerabilityRansomwareLaw & policyAPT https://research.checkpoint.com/2026/28th-september-threat-intelligence-report/12e9zk7Mon, 28 Sep 2026 13:55:26 GMTCheck Point Research. For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The FBI has confirmed unauthorized activity affecting FBIjobs.gov after the ShinyHunters group defaced the…ResearchRansomwareAPT https://www.theregister.com/cyber-crime/2026/09/25/shinyhunters-tells-the-reg-we-hacked-the-fbi-to-protect-our-business/5299250sctlb2Fri, 25 Sep 2026 18:23:31 GMTThe Register. Data theft and extortion biz, that isRansomwareLaw & policyAPT https://www.darkreading.com/cyber-risk/what-we-missed-google-gemini-ai-escape-party1npo8wsFri, 25 Sep 2026 17:56:23 GMTDark Reading. In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from Google Gemini models breaking containment to ShinyHunters ratting on TeamPCP hackers.RansomwareAIAPT https://cloud.google.com/blog/topics/threat-intelligence/shinyhunters-renewed-mass-exploitation-campaign-targeting-oracle-peoplesoft/42f4opFri, 25 Sep 2026 14:00:00 GMTGoogle Threat Intelligence. Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit , Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of CVE-2026-35273 by UNC6240 (ShinyHunters),…ResearchVulnerabilityZero-dayAPTRansomware https://opensourcemalware.com/blog/the-opensourcemalwareshow-episode221s2rbd9Fri, 25 Sep 2026 05:00:00 GMTOpenSourceMalware. ShinyHunters attacks FBI, new WeaselBiscuit malware, Contagious Interview research, and dev FAQsResearchRansomwareMalwareAPT https://www.levelblue.com/blogs/spiderlabs-blog/file-acquisition-may-be-recorded-as-fileaccessed-in-microsoft-3653tklsyThu, 24 Sep 2026 12:30:09 GMTLevelBlue SpiderLabs. A recent trend has emerged where threat actor groups (e.g., ShinyHunters, PEAR, HELIX, etc.) have been leveraging phishing and vishing techniques to gain access to M365 email accounts. Through identity and token abuse, these actors have then automated…ResearchRansomwareAPT https://arstechnica.com/tech-policy/2026/09/fbi-rushes-to-investigate-if-shinyhunters-hack-of-thousands-of-employees-is-real/1wzvef4Wed, 23 Sep 2026 21:46:36 GMTArs Technica. It's unclear what will happen if FBI misses ShinyHunters' deadline.RansomwareLaw & policyAPT https://www.malwarebytes.com/blog/news/2026/09/shinyhunters-claims-fbi-breach-was-revenge-for-false-reporthsjz4dWed, 23 Sep 2026 12:03:41 GMTMalwarebytes Labs. The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics.ResearchBreachRansomwareLaw & policyAPT https://www.infosecurity-magazine.com/news/shinyhunters-fbi-hack-peoplesoft/gx4t06Wed, 23 Sep 2026 10:00:00 GMTInfosecurity Magazine. Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employeesZero-dayRansomwareLaw & policyAPT https://news.risky.biz/risky-bulletin-network-of-10-000-ai-servers-masks-chinese-malicious-activity/1s59fyzWed, 23 Sep 2026 06:06:38 GMTRisky Bulletin. In other news: Ukrainian hackers leak Russia's naval secrets; ShinyHunters hack the FBI; tech firms disrupt EvilTokens PhaaS.RansomwareAIAPT https://techcrunch.com/2026/09/22/hacking-group-shinyhunters-claims-it-breached-the-fbi-stole-agents-and-applicants-data/1lr2udpTue, 22 Sep 2026 18:40:30 GMTTechCrunch Security. The theft of agents' personal information could present a major counterintelligence threat, where agents and their families are extorted into cooperating with a foreign government.BreachRansomwareLaw & policyAPT https://www.theregister.com/security/2026/09/22/shinyhunters-claims-fbi-hack-this-is-not-financially-motivated/52983851k61teuTue, 22 Sep 2026 17:24:13 GMTThe Register. This time it's personalRansomwareLaw & policyAPT https://www.darkreading.com/cyberattacks-data-breaches/shinyhunters-hacked-clop-what-about-clops-victims1aqfxfaMon, 21 Sep 2026 20:07:56 GMTDark Reading. ShinyHunters defaced Cl0p's Dark Web site and claims to have stolen victim data, potentially exposing organizations that paid ransoms to renewed extortion attempts.RansomwareAPT https://www.theregister.com/cyber-crime/2026/09/21/clop-gets-a-taste-of-its-own-medicine-after-shinyhunters-hijack-leak-site/52977021o5qo0wMon, 21 Sep 2026 12:46:00 GMTThe Register. Rival crew demands eight figures and threatens to expose companies that paid to keep quietBreachRansomwareAPT https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/5g6riiMon, 21 Sep 2026 12:30:00 GMTInfosecurity Magazine. ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational dataRansomwareAPT