FBI Gets Help from Detained ShinyHunters Hacker in Jordan

Jordanian authorities have detained Saif al‑Din Khader, known online as Rey, a suspected member of the ShinyHunters hacking group, and he is now cooperating with the FBI to locate other participants. Reuters reported that the arrest took place last week, with two of three sources confirming the detention occurred on Tuesday. Khader is reportedly allowing investigators to examine his devices and digital communications, a move described as critical to ongoing efforts to apprehend additional members of the group.

ShinyHunters is known for stealing login credentials and personal data from compromised accounts, then selling the information on underground markets. Victims often discover the breach when they receive phishing emails that appear to come from legitimate services, prompting them to enter passwords or other sensitive details. The group’s activities can lead to identity theft, financial loss, and further fraud as criminals use the stolen data for additional scams.

The arrest in Jordan highlights the transnational nature of cybercrime and the collaboration between law‑enforcement agencies. While the FBI’s involvement suggests a broader investigation, the immediate effect is a reduction in the group’s operational capacity. However, the threat remains for users whose information may already be compromised.

To protect yourself, regularly change passwords and use a unique password for each online account. Enable two‑factor authentication wherever possible, as it adds an extra layer of security even if credentials are leaked. Be cautious of unsolicited emails that request personal information; verify the sender’s address and look for signs of a phishing email, such as misspellings or mismatched URLs. If you suspect your credentials have been exposed, use a reputable password manager to generate strong passwords and update them immediately.

ComputerScams.com offers free tools to check whether your email address appears in known data breaches and to monitor for suspicious activity. Using these resources can help you detect compromised accounts early and take corrective action.

A practical step you can take right now is to review the security settings on your most important online accounts and enable two‑factor authentication if it is not already active.

Source: Read the original report