HackerFeeds
All ransomware groups

shinyhunters

128 tracked victims
·first seen 2024-04-23·last activity 2026-06-18

Group profile

ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.

MITRE ATT&CK TTPs

TA0001

Initial Access

  • T1552.004Unsecured Credentials: Private Keys

    Scanning GitHub/Bitbucket repositories for exposed API keys and OAuth tokens (Secret Hunting).

  • T1566.003Phishing: Spearphishing Voice (Vishing)

    Voice calls to helpdesk pretending to be employees to obtain password reset or MFA bypass.

TA0005

Defense Evasion

  • T1550.001Use Alternate Authentication Material: Application Access Token

    Use of malicious "Connected" OAuth applications to maintain persistent access to Salesforce and Microsoft 365 environments without needing passwords.

TA0009

Collection

  • T1213Data from Information Repositories

    Frequent targets include Confluence, Jira, and SharePoint to collect internal documentation and plaintext credentials.

TA0010

Exfiltration

  • T1567Exfiltration Over Web Service

    Use of legitimate cloud tools and native APIs to "drain" data from CRMs (Salesforce) directly to C2 servers.

TA0040

Impact

  • T1486Data Encrypted for Impact

TA0043

Reconnaissance

  • T1598.002Phishing for Information: Spearphishing Attachment

Recent victims

showing 50 of 128
DateWebsite / victimSectorCountry
2026-06-18
icsecurity.com
icsecurity.comicsecurity.com
TechnologyUS
2026-06-18
A
Amazon owned OneMedical.com
HealthcareUS
2026-06-18
naic.org
NAIC.orgNAIC.org
Business ServicesUS
2026-06-16
ralphlauren.com
Ralph Laurenralphlauren.com
Consumer ServicesUS
2026-06-15
icc.edu
icc.eduicc.edu
EducationUS
2026-06-15
moody.edu
moody.edumoody.edu
EducationUS
2026-06-15
glendale.edu
glendale.eduglendale.edu
EducationUS
2026-06-15
hccs.edu
hccs.eduhccs.edu
EducationUS
2026-06-15
kodak.com
kodak.comkodak.com
ManufacturingUS
2026-06-15
D
Deep Well Services
Energy
2026-06-15
S
Sysco Corporation
Agriculture and Food ProductionUS
2026-06-13
coe.int
coe.intcoe.int
Not FoundFR
2026-06-12
M
Madison Square Garden Sports Corp.
Consumer ServicesUS
2026-06-12
J
JCPenney & several other subsdiaries under Catalyst Brands & Authentic Brands Group
Consumer ServicesUS
2026-06-12
A
American Tower Corporation
TelecommunicationUS
2026-06-12
Z
Zayo.com & Allstream.com
TelecommunicationUS
2026-06-11
nexstar.tv
Nexstar.tvNexstar.tv
TechnologyUS
2026-06-11
ralphlauren.com
Ralph Lauren Corporationralphlauren.com
Consumer ServicesUS
2026-06-09
nottingham.ac.uk
nottingham.ac.uknottingham.ac.uk
EducationGB
2026-05-30
dentaquest.com
DentaQuest, LLC.dentaquest.com
HealthcareUS
2026-05-29
B
BCD Travel
Business ServicesNL
2026-05-28
dentaquest.com
DentaQuest, LLCdentaquest.com
HealthcareUS
2026-05-23
bakerdist.com
Baker Distributing Companybakerdist.com
Business ServicesUS
2026-05-23
charter.com
Charter Communications, Inc.charter.com
TelecommunicationUS
2026-05-23
dentaquest.com
DentaQuest.comDentaQuest.com
HealthcareUS
2026-05-09
hmhco.com
Houghton Mifflin Harcourt Companyhmhco.com
EducationUS
2026-05-05
addi.com
Adelante Soluciones Financieras (Addi.com)Addi.com
Financial ServicesCO
2026-05-03
instructure.com
Instructure Holdings, Inc. (Canva LMS, instructure.com)instructure.com
EducationUS
2026-05-03
cushmanwakefield.com
Cushman & Wakefield Inc.cushmanwakefield.com
Business ServicesUS
2026-04-30
towerpointwealth.com
TOWERPOINT WEALTH, LLCtowerpointwealth.com
Financial ServicesUS
2026-04-30
follettsoftware.com
Follett Software LLCfollettsoftware.com
EducationUS
2026-04-28
vimeo.com
Vimeo, Inc.vimeo.com
TechnologyUS
2026-04-24
udemy.com
Udemy, Inc. (udemy.com)udemy.com
EducationUS
2026-04-24
adt.com
ADT, Inc. (adt.com)adt.com
Business ServicesUS
2026-04-18
aman.com
Aman Resorts (aman.com)aman.com
Hospitality and TourismSG
2026-04-18
canadalife.com
The Canada Life Assurance Company (canadalife.com)canadalife.com
Financial ServicesCA
2026-04-18
pb.com
Pitney Bowes Inc. (pb.com)pb.com
Business ServicesUS
2026-04-18
7-eleven.com
7-Eleven, Inc. (7-eleven.com)7-eleven.com
Consumer ServicesUS
2026-04-18
carnivalcorp.com
Carnival Corporation & plc (carnivalcorp.com)carnivalcorp.com
Hospitality and TourismUS
2026-04-18
zara.com
Zara (zara.com)zara.com
Consumer ServicesES
2026-04-18
alert360.com
Alert 360 Opco Inc. (alert360.com)alert360.com
Business ServicesUS
2026-04-11
rockstargames.com
Rockstar Gamesrockstargames.com
TechnologyUS
2026-04-11
A
Abrigo, Inc.
Financial ServicesUS
2026-04-11
M
Marcus & Millichap, Inc.
Financial ServicesUS
2026-04-11
K
Kemper Corporation
Financial ServicesUS
2026-04-11
R
Ryan, LLC.
Business Services
2026-04-11
mheducation.com
McGraw Hill, Inc. (mheducation.com)mheducation.com
EducationUS
2026-04-11
amtrak.com
National Railroad Passenger Corporation (amtrak.com)amtrak.com
Transportation/LogisticsUS
2026-04-11
M
Mytheresa
Consumer ServicesDE
2024-04-24
cisco.com
Cisco Systems, Inc. (cisco.com)cisco.com
TechnologyUS