CyberNew CyberNew
Threat Intelligence & APT SecurityWeek 1 week ago

Alleged ShinyHunters Leader Arrested in Jordan

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"An individual believed to be the leader of the extortion group ShinyHunters was reportedly arrested in Jordan and is cooperating with the FBI. The suspect, Saif ‌al-Din Khader, known as Rey, a teenage cybercriminal from Amman, is helping the FBI identify other ShinyHunters members, Reuters reports . Khader is also a known member of the Scattered Lapsus$ Hunters group. It is unclear where he is..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Hacker arrested

An individual believed to be the leader of the extortion group ShinyHunters was reportedly arrested in Jordan and is cooperating with the FBI.

The suspect, Saif ‌al-Din Khader, known as Rey, a teenage cybercriminal from Amman, is helping the FBI identify other ShinyHunters members, Reuters reports.

Khader is also a known member of the Scattered Lapsus$ Hunters group. It is unclear where he is detained.

The arrest was made shortly after the extortion group hacked and defaced the FBI’s jobs site, FBIJobs.gov, boasting about stealing 2-3 terabytes of data.

ShinyHunters sent a sample list of 5,000 FBI employees to the media, claiming to be in possession of the personal and health information of all current and former FBI employees.

Last week, the Dutch police announced the arrest of a 24-year-old man from Amsterdam as part of the FBI’s investigation into ShinyHunters.

Advertisement. Scroll to continue reading.

The FBI later confirmed the arrest, saying the individual was involved in the hacking of more than 140 organizations, as well as in collecting at least $70 million in extortion payments.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →