ShinyHunters Hacker Detained in Jordan Cooperates with FBI
FBI Intensifies Search After Employee Data Theft
Last week, the FBI received news that shook the cybersecurity landscape: a member of the ShinyHunters group, allegedly named Rey, was detained in Jordan and is now collaborating with American authorities. This development came after the collective, which had previously attacked companies and universities worldwide, claimed to have stolen data from thousands of FBI employees, including personal, medical, and national security function information.
Detention in Jordan and Cooperation with the FBI
Saif al-Din Khader, identified in sources as the detained suspect, was taken into custody on Tuesday. While Reuters has not confirmed his current location, two sources stated that he is assisting the FBI and global law enforcement authorities in locating other hackers from the group. The FBI, for its part, declined to comment on details about the arrest or specific overseas activity but reiterated that it continues to intensely investigate the cyber incident.
What the FBI Said About the Attack
The FBI described the attack as “among the most serious data breaches involving United States government information.” Compromised data includes names, addresses, phone numbers, Social Security numbers, background check documents, psychiatric records, and blood and urine analyses. The collective also claimed to have obtained information about counterintelligence, narcotics, and national security threat functions originating from Russia, China, and Iran.
How ShinyHunters Operates
ShinyHunters is an informal collective of hackers, composed of young individuals operating from various countries since around 2019. They employ "ransom-or-release" attacks, obtaining large amounts of information and demanding money in exchange for non-disclosure. The international structure and absence of a conventional hierarchy make it difficult to identify all members.
International Arrests and Investigations
In addition to Khader, other recent arrests include Sebastien Raoult, a 22-year-old French citizen detained in Morocco and extradited to the United States, and a 24-year-old Dutch citizen detained in the Netherlands in September. These actions demonstrate the group's global reach and cooperation among authorities from different countries.
Impact and FBI Response
The FBI heightened its rhetoric after the attack, vowing to aggressively pursue those responsible and maintaining the alert published in the spring, despite the hackers' demands for its removal. The group, in turn, backed down and stated that it would not publish the data, although experts warn that the information may still be at risk of being sold to other criminals or foreign governments.
With information from Terra, Executive Digest.
Source: Terra, Executive Digest