ShinyHunters Extorted Boeing Spin-Off Prior to Arrests(krebsonsecurity.com)
49 pointsby speckx5 hours ago4 comments
  • SoftTalkeran hour ago
    A Jordanian teen is behind ShinyHunters? I don't know if this is impressive or just a sad commentary on the state of security at the organizations they ransomed.
    • ChrisMarshallNY12 minutes ago
      I seem to remember something similar, with Fluffi Bunni, a notoriously good *NIX hacker group.

      I think it turned out to be mostly one guy, but he wasn't a teenager, anymore, when they finally got him[0]. I know that after that arrest, the group disappeared.

      I think that some of the kids they are nailing for ShinyHunters actually ordered hits.

      Maybe publicly going after the FBI wasn't such a bright move... They could have kept it quiet, and made millions, selling to bad guys.

      [0] https://www.csoonline.com/article/510783/data-protection-flu...

    • whizzteran hour ago
      Never underestimate the amount of free time a teenager has (both in doing things and teaching themselves), most might not be up to adult levels but many capable ones are far more capable than many adults doing their jobs.

      I was offered my first outside job after the second year of highschool, I kinda accidentally interviewed for a at the time respected gamedev firm (since I was looking for a summerjob heh) and when we started talking about when to start and I mentioned my school semesters the interviewer realized that I was younger than he had assumed.

    • vablings13 minutes ago
      I would be inclined to doubt it based on the history of the group. Its more likely he is just a fall guy
    • an hour ago
      undefined
    • orbital-decayan hour ago
      Hard-to-reach targets probably become a lot easier to reach when you have years' worth of stolen credentials and private data.
    • ocdtrekkiean hour ago
      I think more modern security is an "emperor has no clothes" situation than people think. The LLMs are gonna have a field day.
      • baby_souffle37 minutes ago
        > I think more modern security is an "emperor has no clothes" situation than people think.

        Outside of a few cases, it's always been a box checking exercise. If you're fortunate, the boxes are kept up to date / written by somebody that knows what they're doing. If you're like most, the box hasn't changed since the 90s when "complex passwords, changed quarterly" was in vogue.

      • whizzteran hour ago
        Companies always prioritize features/capabilities up until shit starts hitting the fan, but even then the culture and requirements makes everything just a job of trying to patch a sinking ship if you're lucky.
  • mmooss11 minutes ago
    I wouldn't leap to the conclusion that they have the right people; I would wait for evidence. They seem to have found them with incredible speed - how often has an attack been resolved this quickly? It would not be the first time the wrong person was arrested (and smeared) in a high pressure situation.

    They need a head on a pike to save face for the FBI, both in front of the public and for internal credibility in government, law enforcement, and within their own origanization. Imagine how the FBI would look if they couldn't find or apprehend the perpetrators. And the current FBI - the leadership and their superiors, at least - seems much more focused on politics than predecessors.

  • trhway31 minutes ago
    interesting "rules of engagement" they have, including "no PRC companies"! :

    https://krebsonsecurity.com/wp-content/uploads/2025/11/slsh-...

    (from https://krebsonsecurity.com/2025/11/meet-rey-the-admin-of-sc... linked in the original post)

  • Computer0an hour ago
    I support shinyhunters in all their endeavors.