Uptime Hamster: 10d 8h 9mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza Hunters

Hunters

1 incidentes 1 paises 1 sectores ransomware RU Ultimo: 2026-05-25
Aliases: hive
Ver en IntelTracker → APTTrail →
Hunters emerged in early 2021 as a ransomware group focusing on high-profile targets across finance, legal, and technology sectors. The group's primary motivation is financial gain, achieved by maximizing disruption and ransom potential. They distinguish themselves through a triple extortion model, incorporating distributed denial of service attacks alongside data encryption and leakage, and demonstrating a keen interest in exploiting zero-day vulnerabilities in widely used enterprise software. While operating independently, their tactics share similarities with groups such as LockBit, Ryuk, and Egregor.

Aliases del actor

hive

Actores similares

hiveransomware · 208shinyhuntersransomware · 88Scattered Lapsus$ Huntersthreat-actor · 1Archive via Utilityactor · 1Archive via Custom Methodactor · 1Hiveactor · 1Hive0117apt · 0HIVE-0145apt · 0Hive0131apt · 0Hive0156apt · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownattack.mitre.orgScattered Lapsus$ Hunters
DLS / leak siteunknownwww.darktrace.comScattered Lapsus$ Hunters
DLS / leak siteunknownransomware.anggipradana.comRansomware Victim: Ralph Lauren (shinyhunters)
DLS / leak siteunknownwww.bleepingcomputer.comRansomware News: ADT confirms data breach after ShinyHunters leak threat
DLS / leak siteunknownwww.bleepingcomputer.comRansomware News: Charter confirms data breach after ShinyHunters extortion threat
Malware asociado
Ursnif, Pawn Storm, Pawn Storm, Pawn Storm, SharpRhino, Ursnif
Tecnicas MITRE
T1036 - Masquerading, T1059, T1480 - Execution Guardrails, T1530 - Data from Cloud Storage Object, T1497.001 - System Checks, T1505
CVEs relacionadas
CVE-2024-55591, CVE-2020-1472, CVE-2020-14644, CVE-2019-2729, CVE-2019-2725, CVE-2017-10271
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (SOCRadar)

United Arab EmiratesArgentinaAmerican SamoaAustriaAustraliaBelgiumBulgariaBrazilBelarusCanada

Sectores atacados

Software (1)

Sectores objetivo (SOCRadar)

Construction of BuildingsFood ManufacturingOther Information ServicesRail TransportationSoftware PublishersReal EstateHospitalsEnterprises & HoldingAccommodationAir Transportation

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com