HIGHRansomware
Global

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

·Source: Krebs on Security

Updated:

Executive Summary

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of extorting a business unit recently divested by the gl

Analysis

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey," was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey's father -- Royal Jordanian Airlines.

Indicators of Compromise (1)

CVE (1)
CVE-2026-35273
NVDMITRE CVE
Source Attribution

Originally published by Krebs on Security on Oct 7, 2026.

Related Threats

HIGHRansomware

Cybercrime crackdown across Africa leads to 1,462 arrests, $105 million seized

More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.

The Record
HIGHRansomware

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]

BleepingComputer
HIGHRansomware

US, UK and Germany Warn of Active SafePay Ransomware

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-uk-germany-warn-active-safepay-ransomware-image_small-10-a-33164.jpg" align=right hspace=4><b>Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days</b><br>U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and ba

Bank Info Security