ShinyHunters
UNC6240Bling Libra
UnattributedNo public state or group attribution on record
ShinyHunters is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. ShinyHunters has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims.
MITRE ATT&CK Techniques
T1016T1018T1036.005T1059.007T1059.009T1069.003T1072T1078T1078.002T1078.004T1082T1083T1090.003T1105T1110T1190T1195.001T1203T1210T1213.003T1213.006T1219T1485T1491.001T1528T1530T1550.001T1552.001T1560.002T1567T1573.002T1580T1583.001T1583.004T1585.002T1587.004T1588.002T1588.007T1589.001T1593.003T1595.002T1598T1598.003T1619T1657T1684
Associated Malware
Tor
- CriticalRansomwareAPTIn Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS RansomwareSecurityWeek · 2d ago
- CriticalRansomwareFeds Suspect Ransom Negotiator Ran ShinyHunters Extortion SiteKrebs on Security · 6d ago
- CriticalRansomwareFBI Arrests Executive at Ransomware Negotiation FirmKrebs on Security · 16d ago
- InfoRansomwareShinyHunters Extorted Boeing Spin-off Prior to ArrestsKrebs on Security · 18d ago
- CriticalRansomwareDutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters InvestigationKrebs on Security · 27d ago