Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
11 IOCs

Gotta Breach 'Em All! The Journey Of ShinyHunters

Sekoia Blog
Sekoia Blog
Published September 24, 2026Original Report

Threat Actors

Malware Families

Excerpt

Gotta Breach 'Em All! The Journey Of ShinyHunters Take a tour GET A demo Solutions Platform Partners Company Resources en fr Take a tour GET A demo en fr Solutions Tailored cybersecurity built for your specific challenges and industry By Use Case SIEM replacement Stack integration Continuous threat detection Automated incident response Alert fatigue relief By Vertical Healthcare Technology Energy & Utilities Government Manufacturing MSSP Platform Give your analysts…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYLockBitPlayScattered SpiderINFRASTRUCTUREchronicle.comrf.wspromo.comCAPABILITYChiselLockBitMETA StealerVICTIMunknown
Adversary(4)
Infrastructure(6)
Capability(4)
Victim

Indicators of Compromise

Open the mindmap →

11 indicators

TypeIndicatorConfidenceScoreFirst Seen
Domainchronicle.comHighScore 58/100First seen
Domainrf.wsHighScore 58/100First seen
Domainpromo.comHighScore 58/100First seen
Domaindatabreaches.netHighScore 58/100First seen
Domainbreachforums.hnHighScore 58/100First seen
CVECVE-2026-35273HighScore 81/100First seen
Domainraidforums.comLowScore 31/100First seen
SHA256fa210f015399de16bf7cb1e05856d179dfaabb1ecc9bb5fd277f94972a3bdc43MediumScore 53/100First seen
SHA256a4e525d8825c1bac6dd934ef2c008b5fb9988289190b5b98d854799e07e207e4MediumScore 53/100First seen
SHA256d5efdf6f35e9c6edcad5fbec707e6c88570c9d8796bf089c29303d591b94e384MediumScore 53/100First seen
Domainbreachforums.stHighScore 58/100First seen

IOC Relationship Graph

Building graph…