Suspected ShinyHunters member 'Rey' reportedly detained in Jordan and helping the FBI identify the group
Reuters sources say the suspect is walking investigators through his devices and communications to help find alleged co-conspirators.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
Jordanian authorities have reportedly detained a suspected member of the ShinyHunters extortion group known online as "Rey," whom Reuters identifies as Saif al-Din Khader. BleepingComputer, citing the Reuters report, says two sources put the arrest on Tuesday. Two sources told Reuters that Khader is now helping the FBI and international law enforcement find other members of the group. According to one source, he is walking investigators through his electronic devices and digital communications to help identify alleged co-conspirators. "His cooperation is critical to ongoing efforts to arrest these hackers," a source said. The Hacker News also reported the detention and his cooperation with the FBI. The arrest is part of an FBI crackdown that followed the group's claimed attack on the bureau. In September, ShinyHunters told BleepingComputer that it had breached FBI systems through an alleged Oracle PeopleSoft zero-day and then moved into FBI-managed AWS GovCloud systems. The group claimed it stole 2TB to 3TB of data, including records on current and former employees, job applicants, and medical and psychiatric information. BleepingComputer has not independently verified the alleged zero-day. The detention follows the recent arrest of a suspected leader of the group in the Netherlands, after which the FBI urged ShinyHunters members to surrender.