Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
ShinyHunters Exploits Oracle PeopleSoft Vulnerability CVE-2026-35273 in New Attack Wave
Threat Actors
Excerpt
ShinyHunters has resumed large-scale attacks against Oracle PeopleSoft , using a small change to its exploit to get past some web application firewall (WAF) rules. Mandiant and Google Threat Intelligence Group (GTIG) say the group, tracked as UNC6240, has deployed web shells on dozens of systems worldwide. The latest targets span higher education, technology, IT services, healthcare, agriculture, transportation, and government. CVE-2026-35273 affects Oracle PeopleSoft…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-35273 | High | Score 80/100 | First seen |
| IP | 162.219.30.165 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…