ShinyHunters
MISPUnknown
Unknown
Unknown
[ShinyHunters](https://attack.mitre.org/groups/G1057) is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. [ShinyHunters](https://attack.mitre.org/groups/G1057) has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims. [ShinyHunters](https://attack.mitre.org/groups/G1057) has been associated with the broader collective called The Community, also known as The Com whose members have also included [Scattered Spider](https://attack.mitre.org/groups/G1015) and [LAPSUS$](https://attack.mitre.org/groups/G1004). Public reporting has mentioned a variety of names for operations [ShinyHunters](https://attack.mitre.org/groups/G1057) members have reportedly conducted with members of other groups, including “Scattered Lapsus Hunters,” “Scattered Lapsus Shiny Hunters,” and “SLSH.”(Citation: ElecticIQ Buyukkaya_ShinyHunters_Sept2025)(Citation: SOCRadar_ShinyHunters_Mar2024)(Citation: Unit42KelleyVaya_BlingLibra_Aug2024)(Citation: Intel471_SH_Aug2021)(Citation: FBI_SHLMS_May2026)(Citation: Google_SHOracle_Jun2026)(Citation: Mandiant_SHDataTheft_Jan2026)(Citation: Google Salesforce JUN 2025)
Tecniche Utilizzate (46)
| ID | ATT&CK | Tattiche |
|---|---|---|
| T1016 | System Network Configuration Discovery | - |
| T1018 | Remote System Discovery | - |
| T1036.005 | Match Legitimate Resource Name or Location | - |
| T1059.007 | JavaScript | - |
| T1059.009 | Cloud API | - |
| T1069.003 | Cloud Groups | - |
| T1072 | Software Deployment Tools | - |
| T1078 | Valid Accounts | - |
| T1078.002 | Domain Accounts | - |
| T1078.004 | Cloud Accounts | - |
| T1082 | System Information Discovery | - |
| T1083 | File and Directory Discovery | - |
| T1090.003 | Multi-hop Proxy | - |
| T1105 | Ingress Tool Transfer | - |
| T1110 | Brute Force | - |
Riferimenti (3)
- cyberwarzone.com - Shinyhunters 22 Year Old Member Pleads Guilty To Cyber Extortion Causing 6 Million In Damage
- bitdefender.com - Pizza Hut Australia Leaks One Million Customers Details Claims Shinyhunters Hacking Group
- justice.gov - Alleged French Cybercriminal Appear Seattle Indictment Conspiracy Computer Intrusion
Alias (142)
Malware Utilizzato (1)
Metadata
| ID: | 476 |
| Created: | 13/01/2026 17:48 |
| Updated: | 11/09/2026 04:00 |