shinyhunters Ransomware
Tracked since Oct 3, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
In MITRE ATT&CK MITRE ATT&CK
Group profile: ShinyHunters (G1057)
ShinyHunters is a financially motivated data-theft and extortion group active since 2020, responsible for high-profile breaches including Ticketmaster (via Snowflake) and PowerSchool; by 2025 they launched a RaaS offering called "shinysp1d3r," and in August 2025 French authorities arrested four members.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Initial Access
T1552.004 Unsecured Credentials: Private KeysT1566.003 Phishing: Spearphishing Voice (Vishing) Defense Evasion
T1550.001 Use Alternate Authentication Material: Application Access Token Collection
T1213 Data from Information Repositories Exfiltration
T1567 Exfiltration Over Web Service Impact
T1486 Data Encrypted for Impact Reconnaissance
T1598.002 Phishing for Information: Spearphishing Attachment Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live