CERT-AGID Reports ShinyHunters-Impersonation Sextortion Emails in Italy

Summary

CERT-AGID says sextortion emails impersonating ShinyHunters, circulating internationally since April 2026, were seen in Italy for the first time. The emails demand $2,000 in Bitcoin within 48 hours; ShinyHunters denies involvement.

Key points

• CERT-AGID reported that the campaign, circulating internationally since April 2026, was observed in Italy for the first time.
• The emails impersonate ShinyHunters and claim malware gave the senders access to compromising material; the article does not establish that this access is real.
• The messages threaten to share alleged intimate videos unless recipients pay $2,000 in Bitcoin within 48 hours.
• ShinyHunters denied involvement when contacted by BleepingComputer.
• CERT-AGID advises recipients to delete or ignore the email, avoid contacting the sender, and not pay.

MITRE ATT&CK

Threat Actors

Countries

Related Articles

• Information-Sector Attacks Rose 48% in Q3 2026reliaquest.comShinyHunters
• Hoxhunt reports AI-assistance indicators in phishing rose to 56% in Decembergithub.com/jacobdjwilsonShinyHunters
• Security Roundup: Flowise Exploitation, AI Credential Theft and SAP Riskssecurityweek.comShinyHunters
• CYFIRMA Maps Edge-Focused Cyber Threats to Australian and New Zealand Governmentcyfirma.comShinyHunters
• Harvard Breach Exposed Data Linked to 850,500 Accounts, Have I Been Pwned Saysbleepingcomputer.comShinyHunters