Scattered Lapsus$ Hunters

Search everything

Mentions · 7d0
Mentions · 30d6
All mentions8
First seenSep 19, 2026
Last mentioned25d ago

Timeline

8 articles · newest first

Another ShinyHunters suspect arrested

Authorities arrested a teenage ShinyHunters suspect in Jordan, the second member detained after a Dutch arrest.

Malwarebytes LabsOct 7, 10:03 UTC · 25d agoPolicy & legal1

FBI confirms 'multiple' arrests related to ShinyHunters hack

FBI says multiple suspects were arrested in the ShinyHunters investigation, with reported detentions in Jordan and the Netherlands.

The Register · SecurityOct 5, 17:46 UTC · 27d agoPolicy & legal1 · 1 read

Detained ShinyHunters hacker reportedly helping FBI track down fellow members

Jordan detained alleged ShinyHunters member Rey, who is reportedly cooperating with the FBI against the group.

Help Net SecurityOct 5, 10:36 UTC · 27d agoPolicy & legal2 · 1 read

Alleged ShinyHunters Leader Arrested in Jordan

Alleged ShinyHunters leader Saif al-Din Khader was arrested in Jordan and is cooperating with the FBI.

SecurityWeekOct 5, 07:16 UTC · 27d agoPolicy & legal2 · 1 read

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

Jordan detained ShinyHunters suspect Rey, who is reportedly helping the FBI identify other members.

The Hacker NewsOct 4, 07:22 UTC · 28d agoPolicy & legal4 · 2 reads

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

Jordan reportedly detained ShinyHunters suspect Saif al-Din Khader, who is helping the FBI find other members.

BleepingComputerOct 3, 19:09 UTC · 29d agoPolicy & legal4 · 1 read

Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation

Dutch police arrested a 24-year-old Amsterdam suspect, identified as Pepijn van der Stap, in the ShinyHunters investigation.

SecurityWeekSep 29, 11:01 UTC · Sep 29, 2026Policy & legalExploitedCVE-2026-352732 · 1 read

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

ShinyHunters exploited a Grav CMS file upload flaw to breach and deface the Clop ransomware gang's leak site, claiming theft of source code, logs, and Tor private keys.

BleepingComputerSep 19, 13:48 UTC · Sep 19, 2026RansomwareExploitedCVE-2025-618823 · 2 reads

Related CVEs

by mentions

CVE-2026-3527397%9.8
Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
published Jun 11, 2026Oracle PeopleSoft Enterprise PeopleTools (Updates Environment Management component)KEVRansomwarePoC
CVE-2025-61882100%9.8
Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing
published Oct 5, 2025Oracle E-Business Suite (Oracle Concurrent Processing, BI Publisher Integration component)KEVRansomware

Appears with

ShinyHuntersthreat actor · 8
FBIvictim · 7
FBIorganization · 6
Oraclevendor · 5
Dutch Policeorganization · 4
Instructurevictim · 3
Lapsus$threat actor · 3
Jaguar Land Rovervictim · 3
PeopleSoftproduct · 3
Scattered Spiderthreat actor · 3
Hellcatthreat actor · 3
Neo Securityorganization · 3
Clopthreat actor · 3
Canvasproduct · 2
Hadrianorganization · 2
GnosticPlayersthreat actor · 1

Entities are extracted by the model from each article. First seen Sep 19, 2026, last mentioned 25d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.