ShinyHunters is a financially motivated cybercriminal group first appearing in 2019, gaining public notoriety in 2020 for extensive data breaches. The group is suspected to operate from regions in Asia and Eastern Europe, though its exact origins remain unconfirmed. Initially known for large-scale database dumps, ShinyHunters evolved to target cloud environments and SaaS applications, monetizing stolen customer and corporate data through ransom demands or sales on dark web forums under a strict "pay or leak" model. What sets ShinyHunters apart is its primary focus on data exfiltration and extortion rather than system encryption, often engaging directly with the cybersecurity community and managing platforms like BreachForums. The group operates under the persona "ShinyCorp" and has demonstrated overlap or affiliation with other groups such as Scattered Spider and Lapsus$, sometimes collectively referred to as "Scattered Lapsus$ Hunters."

Aliases del actor

UNC6040Scattered Lapsus$ Hunters (SLH)ShinyCorp

Actores similares

Scattered Lapsus$ Huntersthreat-actor · 1huntersransomware · 307LAPSUS$actor · 25Scattered Spideractor · 2Huntersransomware · 1SCATTERED SPIDERapt · 0UNC6040apt · 0Scattered Canaryapt · 0Night Huntersapt · 0Lapsus$ransomware · 0

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker