Threat Brief — 2026-10-03 — ShinyHunters member detained, cooperating with FBI
A suspected ShinyHunters extortion-group member known online as "Rey" has reportedly been detained in Jordan and is now cooperating with the FBI to help locate remaining group members. This is a genuine development in a story first reported on 2026-09-28, when Dutch police arrested a ShinyHunters associate and the FBI publicly urged other members to surrender. A second arrest in a separate jurisdiction, combined with active cooperation, materially increases legal pressure on the group and may accelerate identification of additional members.
Top items
- ShinyHunters member "Rey" detained in Jordan, aiding FBI. A suspected member of the ShinyHunters extortion group has been detained in Jordan and is reportedly cooperating with U.S. federal authorities to locate other members. This follows the initial Dutch arrest and FBI public appeal first reported 2026-09-28 by KrebsOnSecurity, and represents a second law-enforcement action in a different country with active suspect cooperation — increasing the likelihood that additional members' identities are exposed. (src: BleepingComputer); (first reported: KrebsOnSecurity)
Themes
Law-enforcement momentum against extortion groups. The ShinyHunters development adds to a recent pattern of multi-jurisdictional pressure on cybercrime actors —KillSec's dismantling, OFAC sanctions on TRON addresses tied to Tren de Aragua, and now a second ShinyHunters arrest with active cooperation. Groups that previously operated with relative impunity face compounding legal exposure as members turn on each other.