Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
15 / 89 results
highperson_alertThreat ActorShinyHunters member arrested in FBI crackdown on extortion activity
ShinyHunters is a cybercrime group known for large-scale data breaches and extortion operations. The group has been linked to numerous high-profile data theft incidents targeting organizations globally.
highperson_alertThreat ActorFBI Arrests ShinyHunters-Linked Ransomware Negotiator in Canada
ShinyHunters is a financially motivated cybercrime group specializing in data theft and extortion. The group typically uses phishing and stolen credentials to exfiltrate data from software-as-a-service (SaaS) platforms, then threatens to publish stol…
highperson_alertThreat ActorFBI Arrests Third ShinyHunters Suspect in Jobs Portal Breach
ShinyHunters is a financially motivated extortion group specializing in large-scale data breaches and extortion operations. According to FBI assessments, the group has breached more than 140 organizations and extracted at least $70 million in extorti…
highperson_alertThreat ActorFBI arrests Canadian suspect tied to ShinyHunters FBI breach
ShinyHunters is an extortion group specializing in data theft from web applications and cloud-based SaaS platforms, demanding ransom payments under threat of public data leaks.
highperson_alertThreat ActorShinyHunters Leader Detained in Jordan, Cooperating with FBI
ShinyHunters is a prolific data theft and extortion group attributed to multiple high-profile breaches. The suspected leader, a teenager from Amman, Jordan operating under the handle "Rey" (identified as Saif Al-din Khader), was detained by Jordanian…
highperson_alertThreat ActorShinyHunters Breaches FBI via Oracle PeopleSoft Patch Failure
ShinyHunters is a cybercrime group known for data theft and breach operations. In this incident, the group exploited a vulnerability in Oracle PeopleSoft to compromise the FBI's job portal, stealing personal details of thousands of bureau employees.
highperson_alertThreat ActorShinyHunters Member "Rey" Detained in Jordan, Cooperating with FBI
ShinyHunters is a prolific cybercriminal group specializing in data theft, extortion, and breach operations. Originating around April-May 2020, the group evolved from earlier extortion-focused collectives TheDarkOverlord and GnosticPlayers.
highperson_alertThreat ActorShinyHunters Member "Rey" Detained in Jordan, Cooperating with FBI
ShinyHunters is a cybercrime group specializing in data theft and extortion operations. The group has gained notoriety for breaching organizations, exfiltrating sensitive data, and either selling stolen databases on underground forums or leveraging t…
highperson_alertThreat ActorFBI warns ShinyHunters members to surrender after Dutch arrest
ShinyHunters is a financially motivated cybercrime group linked to extortion activities targeting organizations in the United States, Netherlands, and globally.
highperson_alertThreat ActorDutch Police Arrest 24-Year-Old Linked to ShinyHunters Group
ShinyHunters is a financially-motivated cybercrime group known for large-scale data breaches and extortion operations. The group has historically targeted organizations to steal sensitive data for sale or extortion.
highperson_alertThreat ActorDutch Police Arrest Amsterdam Man in ShinyHunters Investigation
ShinyHunters is a cybercrime group known for large-scale data breaches and extortion operations. The group has been active since at least 2020, targeting organizations across multiple sectors to steal and leak sensitive data.
highperson_alertThreat ActorShinyHunters escalates attacks after Dutch arrest of suspected member
ShinyHunters is a prolific cybercrime group known for large-scale data theft and extortion operations. The group operates as a collective with multiple members across jurisdictions.
highperson_alertThreat ActorShinyHunters Exploits Oracle PeopleSoft CVE via WAF Bypass
ShinyHunters is a financially motivated extortion gang known for data theft and extortion operations. The group targets organizations with vulnerable internet-facing applications to exfiltrate sensitive data and leverage it for ransom demands.
criticalperson_alertThreat ActorShinyHunters Exploits Oracle PeopleSoft CVE-2026-35273 via WAF Bypass
ShinyHunters is a financially motivated cybercrime group (tracked by Mandiant as UNC6240) with an established pattern of data theft extortion. The group originated as GnosticPlayers before rebranding to ShinyHunters in 2020.
highperson_alertThreat ActorClop Ransomware Leak Site Compromised via Grav CMS Path Traversal Flaw
This incident involves two distinct threat actors: Clop, a financially motivated ransomware operation known for large-scale data extortion campaigns, and ShinyHunters, a cybercrime actor specializing in data breaches and database theft.