What other aliases and vendor names is SHADOW-AETHER-015 known by?

SHADOW-AETHER-015 is tracked across the cybersecurity industry by multiple aliases, including: no other verified aliases.

What vulnerabilities and CVEs does SHADOW-AETHER-015 actively exploit?

SHADOW-AETHER-015 has been observed weaponizing vulnerabilities including CVE-2026-35273.

SHADOW-AETHER-015

Q: What are the primary motivations and sponsors of SHADOW-AETHER-015?

SHADOW-AETHER-015 operates from Unknown with primary motivation categorized as financial gain through data theft, ransomware, and multi-pressure extortion, sponsored or affiliated with criminal organization.

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat

Primary Aliases: No secondary vendor aliases recorded.

Sponsor / State Affiliation criminal organization

Primary Motivation financial gain through data theft, ransomware, and multi-pressure extortion

Active Timeline Unknown – Present

Confidence Rating 85% (Grounded)

Instructure Canvas Breach, Oracle PeopleSoft Zero-Day Exploitation, 0ktapus Identity Abuse

⚔️ Weaponized CVE Matrix (1)

CVE-2026-35273

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Education (Universities, K-12, Teaching Hospitals) Identity and Access Management (IAM) Systems (e.g., Okta, Azure AD/Entra ID) Cloud Infrastructure Oracle Enterprise Software (PeopleSoft/E-Business Suite)