Dutch authorities arrested Pepijn van der Stap, a Dutch man previously convicted of data theft and extortion in 2023, who reportedly joined cybersecurity firm Neo Security after his release last year. Krebs on Security and Reuters identify him as the suspect, though neither Dutch police nor the FBI officially named him, and ShinyHunters denies he has any association with the group. Dutch police say he is also suspected of incitement to commit two murders, while FBI officials describe him as one of the group's alleged leaders.
theverge.com
· 2026-09-29
Ardit Kutleshi, 28, has pleaded guilty to running Rydox, an online marketplace that sold stolen identities, login credentials, credit card data and cybercrime tools. Court documents show Rydox facilitated over 7,600 sales of stolen personal data and offered more than 321,000 other cybercrime products to over 18,000 users between 2016 and its 2024 shutdown. Kutleshi was extradited from Kosovo to the US in 2025 after a joint law enforcement operation seized the site's domain and servers in Kuala Lumpur.
bleepingcomputer.com
· 2026-09-25
The FBI seized the two domains operating NightmareStresser, a DDoS-for-hire platform that had over 566,000 registered users and dozens of servers capable of launching attacks up to 200 Gbps. The takedown was carried out under Operation PowerOFF, an international law enforcement effort targeting DDoS-as-a-service infrastructure.
bleepingcomputer.com
· 2026-09-17
GoKawiil