ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
ShinyHunters suspect 'Rey' detained in Jordan, cooperating with FBI.
A suspected member of the ShinyHunters group, known as 'Rey' (Saif al-Din Khader), has been detained in Jordan and is reportedly cooperating with the FBI. Rey, also linked to other cybercrime groups like Scattered LAPSUS$ Hunters and Hellcat, has allegedly been involved in breaching over 140 organizations and extorting millions. This development follows the recent arrest of another individual in Amsterdam and is part of ongoing efforts to dismantle the ShinyHunters network.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonThe detention of ShinyHunters member 'Rey' and his cooperation with the FBI highlights how organized cybercrime groups can breach over 140 organizations through coordinated intrusion and extortion campaigns. The group's ability to operate across multiple aliases and affiliated crews (Scattered LAPSUS$, Hellcat) demonstrates the challenge of attributing attacks and dismantling loosely federated threat actor networks. Organizations victimized by such groups often suffer from insufficient access controls and monitoring that allow attackers to persist undetected for extended periods. This case underscores the critical importance of threat intelligence sharing, rapid incident response, and law enforcement collaboration in countering large-scale cybercriminal enterprises.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — apply.fbijobs[.]gov
- malware — LAPSUS$
- malware — Hellcat
- malware — Cl0p