Threat Actor
SHADOW-AETHER-015
- First Reported
- May 10, 2026
- Latest Reported
- Jun 18, 2026
Reported Context (2)
- Mandiant attributed in-the-wild exploitation to this tracked cluster; the article identifies it as ShinyHunters. PeopleSoft PeopleTools RCE Exploited Through PSIGW SSRF and XMLDecoder Chain
- Named by TrendAI™ Research as the group that released a document containing 8,809 educational institution names; the source attributes the Canvas breach to the group. Canvas Breach Exposes Data Linked to 8,809 Educational Institutions
CVE (1)
People (2)
Threat Actors (1)
MITRE ATT&CK (3)
Vendors (3)
Products (13)
Tools (1)
Industries (3)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.