VulnHub

Real-time Cybersecurity News

High

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

The Hacker News
Data Breach

Overview

Authorities in Jordan have detained a suspect linked to the ShinyHunters digital extortion group, a notorious outfit known for hacking and selling stolen data. The suspect, identified as Saif al-Din Khader, also known as 'Rey,' was taken into custody on September 29, 2026. Reports indicate that he is cooperating with the FBI to help identify other members of the group. ShinyHunters has been responsible for several high-profile data breaches, impacting various companies and putting sensitive information at risk. This development could lead to further arrests and a crackdown on the group's activities, which have affected numerous organizations worldwide.

Key Takeaways

  • Affected Systems: ShinyHunters group, various companies affected by data breaches
  • Timeline: Ongoing since September 29, 2026

Original Article Summary

A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name is Saif ‌al-Din Khader, is said to have been brought into custody on September 29, 2026, cooperating with the U.S. Federal Bureau of Investigation (FBI) and

Impact

ShinyHunters group, various companies affected by data breaches

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since September 29, 2026

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Data Breach.

Read Original Article

Related Coverage

Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited

Help Net Security

A 16-year-old security researcher discovered a significant vulnerability in Titan, an internal analytics service used by Microsoft. This flaw potentially allowed unauthorized users to access a massive database containing 17 trillion rows of sensitive data, including employee records and Bing search analytics. Meanwhile, Citrix has been dealing with the fallout from two zero-day vulnerabilities in its NetScaler product, which have reportedly been exploited globally for weeks. Citrix has released patches for eight critical and high-severity vulnerabilities, but the ongoing exploitation raises concerns for organizations using these systems. The incidents serve as a reminder of the vulnerabilities that can exist even in well-established services and the need for constant vigilance in cybersecurity.

Oct 4, 2026

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

The Hacker News

A newly identified cyber espionage group, TA419, believed to be linked to China, is targeting U.S. experts in artificial intelligence. The group has conducted several credential phishing campaigns aimed at professionals in think tanks, universities, and the legal sector. Attackers are impersonating well-known economists, AI policymakers, and even an employee from Anthropic to specifically target these experts. This type of cyber activity raises concerns about the security of sensitive information related to AI policy, especially given the growing importance of AI in global economics and regulation. The attacks indicate an ongoing effort to gather intelligence on U.S. AI initiatives and strategies.

Oct 4, 2026

ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI

Hackread – Cybersecurity News, Data Breaches, AI and More

A hacker known as 'Rey' from the group ShinyHunters has been detained in Jordan. This individual is reportedly cooperating with the FBI following claims that ShinyHunters was involved in significant data breaches affecting both the FBI and various corporations. The implications of this detention could be far-reaching, as ShinyHunters has a history of selling stolen data from high-profile breaches. If Rey provides valuable information to the FBI, it could lead to further arrests or a crackdown on similar hacking groups. This situation emphasizes the ongoing battle between law enforcement and cybercriminals in the realm of data security.

Oct 3, 2026

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

BleepingComputer

A hacker linked to the ShinyHunters group, operating under the alias 'Rey', has reportedly been detained in Jordan. This individual is said to be cooperating with the FBI, providing information that could help locate other members of the extortion group. ShinyHunters is known for its involvement in data breaches and selling stolen information online. The arrest could potentially lead to significant developments in efforts to dismantle this hacking organization and protect victims of their attacks. The cooperation with law enforcement may also encourage other members to turn themselves in or provide intelligence on ongoing criminal activities.

Oct 3, 2026

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The Hacker News

MI5, the UK's domestic intelligence agency, has issued a warning that over 100 academics in the United Kingdom have been linked to research funded by China's Ministry of State Security (MSS). This research effort is reportedly aimed at enhancing China's intelligence capabilities. The alert, released on September 30, 2026, highlights the activities of the China General Technology Research Institute (CGTRI), which is believed to play a significant role in supporting these initiatives. The implications of this situation are serious, as it raises concerns about intellectual property theft and national security, particularly given the sensitive nature of the research involved. The involvement of such a large number of academics suggests a broader trend of foreign influence and espionage in academic settings, which could undermine trust in international collaborations.

Oct 3, 2026

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Hackread – Cybersecurity News, Data Breaches, AI and More

The Dutch Institute for Vulnerability Disclosure has suffered a breach due to two zero-day vulnerabilities in Zammad, a customer support software. Attackers exploited these vulnerabilities in an AI-driven attack, allowing them to execute remote code and gain root access to the system. This incident raises significant concerns about the security of software tools that organizations rely on for handling sensitive information. As a result, the breach may affect not only the institute but also other users of Zammad, highlighting the need for heightened vigilance in software security measures. Organizations using Zammad should assess their systems immediately to mitigate potential risks.

Oct 3, 2026