ShinyHunters
ShinyHunters is a cybercriminal hacking group whose primary activity is data theft, targeting internet companies, technology platforms, and online service providers. The group obtains user databases, source code, and sensitive information through unauthorized means, subsequently selling or publicly disclosing the acquired data on dark web marketplaces and underground forums. Its attacks span multiple countries and industries, and cybersecurity research organizations classify it as a high-risk threat actor with persistent offensive capabilities.
Core Facts
Timeline (last 90 days)
The FBI arrested a second suspect in connection with this case.
ShinyHunters claimed responsibility for the data breach involving ticketing giant Ticketmaster.
The suspect was arrested on September 15, several days before ShinyHunters claimed to have launched a new round of attacks.
In 2021, the U.S. Department of Justice charged multiple individuals with ties to ShinyHunters.
ShinyHunters takes its name from the concept of Shiny Pokémon in Nintendo's Pokémon games.
ShinyHunters had directed attacks at game developer Rockstar Games.
A member of ShinyHunters was extradited and indicted in the United States in 2022.
Dutch police arrested a hacker allegedly affiliated with the ShinyHunters cybercrime group.
The hacker's laptop was found to contain plans to murder two individuals.
ShinyHunters' criminal history dates back to around 2020.
15 more timeline events
All Facts (20)
ShinyHunters typically gains initial access by purchasing previously leaked employee credentials, exploiting cloud storage misconfigurations, or attacking third-party supply chains, rather than relying on zero-day vulnerabilities
65%UnverifiedShinyHunters曾入侵印尼电商巨头Tokopedia泄露9100万用户数据
85%UnverifiedShinyHunters是自2020年前后活跃至今的国际网络犯罪组织，曾在2020年窃取微软GitHub私有仓库500GB源代码
85%Unverified2023年ShinyHunters对云存储服务Snowflake的客户发动供应链式攻击，波及Ticketmaster和桑坦德银行等数十家企业
85%UnverifiedShinyHunters曾攻击微软GitHub私有仓库
85%UnverifiedShinyHunters自2020年前后便活跃于网络犯罪地下市场
85%Unverified2024年法国当局曾逮捕并起诉ShinyHunters组织的部分成员，但组织的核心运作并未因此中断
80%UnverifiedShinyHunters部分成员曾于2022年在法国被捕，但组织活动并未因此停止
80%UnverifiedShinyHunters曾攻击AT&T，泄露约7300万用户数据
80%UnverifiedShinyHunters曾攻击印度电商平台Tokopedia，泄露9100万条记录
80%UnverifiedShinyHunters累计涉及数据泄露规模超过10亿条记录
70%UnverifiedShinyHunters claimed responsibility for the data breach involving ticketing giant Ticketmaster.
50%UnverifiedShinyHunters takes its name from the concept of Shiny Pokémon in Nintendo's Pokémon games.
50%UnverifiedShinyHunters had directed attacks at game developer Rockstar Games.
50%UnverifiedShinyHunters' preferred attack methods include exploiting misconfigured AWS S3 bucket permissions, credential stuffing attacks, and purchasing or exchanging previously leaked access credentials.
50%UnverifiedShinyHunters' criminal history dates back to around 2020.
50%UnverifiedShinyHunters attacked the ticketing platform Ticketmaster, reportedly affecting 560 million users.
50%UnverifiedShinyHunters is a hacker group that has been active on the dark web and underground forums in recent years, known for breaching large enterprises and institutions and selling or publicly releasing stolen data on forums.
50%UnverifiedLaw enforcement arrested several suspected ShinyHunters-affiliated members in 2022, but the group's activities did not cease
50%UnverifiedShinyHunters' typical method is to first steal data, then make ransom demands to the victim organization, and publicly leak the data if payment is refused
50%