Search/shinyhunters
● Threat actor

shinyhunters

ShinyHunters is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. ShinyHunters has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims. ShinyHunters has been associated with the broader collective called The Community, also known as The Com whose members have also included Scattered Spider and LAPSUS$. Public reporting has mentioned a variety of names for operations ShinyHunters members have reportedly conducted with members of other groups, including “Scattered Lapsus Hunters,” “Scattered Lapsus Shiny Hunters,” and “SLSH.”

Also known asUNC6240Bling Libra
Claimed attacks
155
Top country hit
US
108 attacks
Countries targeted
17
Last activity
Sep 24, 2026
first seen Oct 3, 2025
Intelligence Reports32
32 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Dark Web Presence3
3 known leak sites tracked

Known .onion/clearnet leak sites for this group, with live status — unlock with Premium.

Upgrade to Premium
Connections
778 relationships