Back to Feed
Threat IntelligenceOct 3, 2026

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

ShinyHunters member 'Rey' detained in Jordan, cooperating with FBI.

A suspected member of the ShinyHunters extortion group, known as 'Rey' and identified as Saif al-Din Khader, has reportedly been detained in Jordan and is cooperating with the FBI. Khader is allegedly assisting law enforcement by providing access to his devices and communications to help locate other ShinyHunters members. This development follows an FBI crackdown on the group after ShinyHunters claimed a breach of FBI systems.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run FBI?

Get an email when a new story names FBI, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

The detention of a ShinyHunters member highlights how extortion groups exploit weak access controls and poor monitoring to breach high-profile targets, including law enforcement systems. The group's activities underscore the persistent threat posed by organized cybercriminal networks that leverage compromised credentials and insider communications to carry out large-scale data theft. This case demonstrates the importance of proactive threat intelligence and cross-border law enforcement cooperation in dismantling such groups. Critically, it also reveals that even sensitive government systems can be targeted, making robust incident response planning non-negotiable for all organizations.

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — ShinyHunters
  • mitre_attack — T1078
  • mitre_attack — T1552

Entities

ShinyHunters (threat_actor)Rey (threat_actor)Umbreon (threat_actor)Pepijn van der Stap (threat_actor)Saif al-Din Khader (threat_actor)FBI (vendor)