ShinyHunters’ Data-Theft Activity and BreachForums Role in Focus
Summary
DarkOwl profiles ShinyHunters’ reported data-theft methods, victim claims and role in BreachForums, including the group’s reported retirement as forum administrators after the site’s 2024 seizure.
Key points
- The article describes ShinyHunters as a cybercriminal group that steals and sells data, and sometimes threatens to release it unless victims pay.
- Reported methods include exploiting web application vulnerabilities, credential stuffing, phishing, and seeking credentials or API keys in repositories and unsecured cloud storage.
- The group claimed or was reported to have breached organizations including Tokopedia, Microsoft, BigBasket, AT&T and Pizza Hut Australia; the article attributes these incidents to claims or reports.
- ShinyHunters most recently claimed access to LiveNation/Ticketmaster data and offered it for sale on BreachForums.
- The article says BreachForums was seized again in May 2024 and that ShinyHunters relaunched it after the seizure.
- After the forum returned in June, the ShinyHunters account announced it was retiring as an administrator and handing control to a user named Anastasia.
Article Details
- Topic
- ShinyHunters’ cybercriminal activity, data breaches, and association with BreachForums
MITRE ATT&CK
T1110.004 · Credential StuffingThe article says ShinyHunters use credential stuffing attacks.T1566 · PhishingThe article reports phishing campaigns to steal login credentials.T1567 · Exfiltration Over Web ServiceThe group exfiltrates stolen data and shares or sells it on underground forums.T1593.003 · Code RepositoriesThe article reports that the group reviews company GitHub repositories.
People
Threat Actors
Products
Countries
Industries
E-commerceIn May 2020, ShinyHunters allegedly breached the Indonesian e-commerce giant, Tokopedia, stealing data of over 91 million users.HealthcareFurthermore, recognizing the value of healthcare data, ShinyHunters have shifted some of their focus to this sector.RetailShinyHunters have maintained their focus on the retail and e-commerce sectors.