Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
ShinyHunters: Decentralized Extortion Targets Cloud SaaS at Scale
Threat Actors
Malware Families
Excerpt
ShinyHunters represents one of the most prolific and sophisticated data exfiltration groups of the past five years, responsible for compromising over 1 billion user records across hundreds of organizations worldwide. From their Pokemon-inspired origins in 2020 to their recent evolution into a decentralized extortion-as-a-service operation, this threat actor has fundamentally reshaped the cybercrime landscape through innovative social engineering tactics, strategic forum…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(3)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | my-ticket-portal.com | High | Score 58/100 | First seen |
| Domain | login-salesforce.com | High | Score 71/100 | First seen |
| Domain | dashboard-salesforce.com | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…