SAIF al-Din Khader, known online as “Rey” and “Hikki-Chan”, a key member of the ShinyHunters hacking group, has been detained by Jordanian authorities, according to three people familiar with the matter who spoke to Reuters. The sources said Khader was brought into custody on Tuesday and that he is cooperating with the FBI to help identify his fellow hackers. Reuters notes that the circumstances of his detention and current whereabouts were not immediately clear.
Khader’s involvement with ShinyHunters has been reported by multiple outlets, with the group claiming to have stolen data on every FBI employee, though the article does not provide direct evidence of such a dataset. The report adds that two sources indicated Khader is assisting law enforcement to locate other members of the group. Khader, who has previously been doxxed by Kela and discussed by Brian Krebs, has long been a figure tied to the group’s activities and its wider cybercrime narrative. Reuters’ account frames his detention as part of a broader, ongoing international effort to track and disrupt ShinyHunters’ operations.
The piece quotes Reuters as the primary source for the detention and cooperation claims, and notes that the situation is fluid, with Reuters unable to determine Khader’s exact status or location at the time of reporting. The article does not present additional technical details about exploits, specific data claims, or CVEs tied to Khader’s activities.