← All Threat Actors
Threat Actor Profile

ShinyHunters

No known aliases in database
⚠ Critical Threat
Ticketmaster/Live Nation Breach, Santander Data Theft, Salesforce CRM Campaign
Origin
Motivation Financial gain via the sale of stolen datasets and extortion ransoms from high-profile organizations.

Target Sectors

Technology Finance Retail Education Telecommunications Insurance Luxury Goods Aviation

Known TTPs

Voice Phishing (Vishing)
OAuth Token Theft/Abuse
SaaS and Cloud Misconfiguration Exploitation
Credential Harvesting (Infostealers)
MFA Bypass and Session Hijacking
Third-party Supply Chain Compromise
Zero-day Exploitation (e.g., Oracle PeopleSoft CVE-2026-35273)
Pay-or-Leak Extortion

External Resources

CISA Advisories ↗

Related Intelligence


LINK COPIED TO CLIPBOARD