Key Takeaways:
- Jordanian authorities reportedly detained a suspected ShinyHunters member known online as Rey in the ShinyHunters Rey detained case.
- Sources say the suspect is cooperating with the FBI to help find other group members.
- A new data leak site linked to ShinyHunters has appeared despite the ongoing law enforcement effort.
Jordanian authorities reportedly detained a suspected member of the ShinyHunters hacking group this week. The individual, known online as Rey and identified by sources as Saif al-Din Khader, is reportedly cooperating with the FBI to help investigators find other members of the group.
Jordanian Authorities Detain Suspected ShinyHunters Hacker
Jordanian authorities reportedly took a suspected ShinyHunters member into custody this week. Sources identified the person as Saif al-Din Khader, who uses the online name Rey. Sources also told Reuters that he is helping the FBI and other law enforcement agencies identify and locate other group members.
One source said Khader is giving investigators access to his electronic devices and digital communications. This information could help authorities identify people linked to the wider hacking operation.
ShinyHunters has not responded to questions about the ShinyHunters Rey detained case. The group is known for stealing company data and demanding money to prevent the information from being published. Its attacks have affected organizations in several countries.
ShinyHunters Continues Its Operations After Detention
A new ShinyHunters data leak site appeared after the reported detention, suggesting that other members of the group may still be active. Reports said the group’s website had gone offline, but the group later said it had moved to a new address after facing repeated denial-of-service attacks.
The group has faced several arrests and other law enforcement actions in recent years. Even after members are detained, other people involved can continue operations or set up new websites and other systems.
Past arrests linked to ShinyHunters, following the ShinyHunters Rey detained case, include people connected to the Snowflake data theft attacks, PowerSchool breaches, and the Breached hacking forum. Authorities in different countries continue working together to identify other people involved in the group’s activities.
Group Targets Cloud Services In Data Theft Attacks
ShinyHunters has focused heavily on company cloud systems and software services. The group has targeted Salesforce and other cloud platforms, often breaking into third-party companies and using stolen login tokens to reach connected services.
These stolen tokens can give attackers access to company systems and customer information.
The group has also been linked to a major data theft attack involving Instructure Canvas, which caused significant service problems for the education platform. The affected company later reached an agreement with the attackers to prevent them from publishing the stolen information.
Security teams continue watching for activity from remaining ShinyHunters members as international investigations continue following the ShinyHunters Rey detained development.
Visit more of our news! CyberPro Magazine
