Summary
A ShinyHunters member detained in Jordan is reported to be cooperating with the FBI investigation into the group, providing investigators with information about the group’s operations, membership, and infrastructure. The cooperation report, if accurate, represents a significant intelligence gain for the investigation and may accelerate identification and arrest of additional members.
Timeline
| Date | Event |
|---|---|
| Sep 30, 2026 | ShinyHunters Jordan detention reported as unverified; TTO-2026-0930-186 published |
| Oct 3, 2026 | Jordan detainee reported cooperating with FBI investigation |
What Changed
The cooperation report upgrades the Jordan detention from an unverified intelligence report to an active investigative development. A cooperating witness with insider knowledge of ShinyHunters’ operations can provide the identities of members operating under pseudonyms, the infrastructure used for data exfiltration and sales, and the cryptocurrency wallets used to receive proceeds.
Note on Domain Intelligence
ShinyHunters does not operate legitimate clearnet infrastructure. Domain intelligence scores are not applicable to this bulletin.