Threat actor
threat_actor:shane_sonderman
Threat actor who coordinated or participated in harassment and fake-emergency calls to obtain social-media accounts for resale.
Threat actor who coordinated or participated in harassment and fake-emergency calls to obtain social-media accounts for resale.
“They worked together to try to harass people and get their accounts.”
“the guy responsible was a seventeen-year-old from Memphis, Tennessee named Shane Sonderman.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Swatting | Explicit | 106 |
| outgoing | USES | online harassment | Explicit | 106 |
| outgoing | USES | Grindr | Derived | 106 |
| outgoing | USES | Account takeover | Explicit | 106 |
| outgoing | ASSOCIATED_WITH | Federal Bureau of Investigation | Uncertain | 106 |
| incoming | ATTRIBUTED_TO | JW swatting incident | Attributed | 106 |
| incoming | ATTRIBUTED_TO | Mark Herring swatting incident | Attributed | 106 |
JW swatting incident ATTRIBUTED_TO Shane Sonderman
The FBI identified the person who swatted JW as seventeen-year-old Shane Sonderman from Memphis, Tennessee.
Attributed Confidence 97% · Jack Rhysider EP 106 Details
“the guy responsible was a seventeen-year-old from Memphis, Tennessee named Shane Sonderman”
Mark Herring swatting incident ATTRIBUTED_TO Shane Sonderman
The episode says the same attacker who swatted JW also swatted Mark Herring, and identifies that attacker as Shane Sonderman.
Attributed Confidence 97% · Jack Rhysider EP 106 Details
“the person who swatted Mark Herring was the same person who swatted JW and his friend”
“the guy responsible was a seventeen-year-old from Memphis, Tennessee named Shane Sonderman”
Shane Sonderman USES Swatting
Shane Sonderman and a UK teenager used fake emergency calls to harass victims and pressure them to surrender accounts.
Explicit Confidence 98% · Jack Rhysider EP 106 Details
“They worked together to try to harass people and get their accounts”
Shane Sonderman USES online harassment
Shane Sonderman and his associate conducted harassment campaigns against account holders.
Explicit Confidence 99% · Jack Rhysider EP 106 Details
“Together, they targeted six people with harassment campaigns to get peoples’ accounts in order to sell them”
Shane Sonderman USES Grindr
The episode says the attackers used Grindr to contact people near a woman they were harassing and direct someone to her address.
Derived Confidence 92% · Jack Rhysider EP 106 Details
“They got on Grindr, a dating app, and connected with some people in her town”
Shane Sonderman USES Account takeover
The broader scheme included attempts to gain control of social-media accounts through password attacks and SIM-swapping.
Explicit Confidence 91% · Jack Rhysider EP 106 Details
“hacking into accounts and changing passwords, SIM-swapping people to try to gain access to an account”
Shane Sonderman ASSOCIATED_WITH Federal Bureau of Investigation
No claim extracted; the FBI investigated and arrested Shane but did not operate him.