Trending Topics
TRENDING TOPICS
June 17, 2026
Rokarolla Android Trojan Emerges as Major Threat
ShinyHunters
ShinyHunters (UNC6040) is a financially motivated extortion group active since 2020, known for mass data theft and Salesforce-focused vishing campaigns. In 2025, the group became a core operator behind the Scattered LAPSUS$ Hunters extortion brand alongside Scattered Spider.
Trending Topics
ShinyHunters and Scattered Spider intrusions show identity is now the top SaaS attack vector. State-backed actors compromised Notepad++'s update servers. ShadowHS delivers fileless Linux post-exploitation. Arsink Android RAT impersonates 50+ consumer brands.
The Rise of Federated SaaS Intrusions
ShinyHunters and Scattered Spider are vishing employees into completing legitimate OAuth logins for Salesforce, Okta, and Microsoft Entra, turning one compromised support call into federated SSO access across an organization's entire SaaS stack.
Trending Topics
TRENDING TOPICS
NOV 24, 2025
Update: DPRK Expands Contagious Interview Operation With
Trending Topics
Cloudflare outage traced to an internal database error, not an attack. ShinyHunters, Scattered Spider, and Lapsus$ build ShinySp1d3r ransomware from scratch. npm packages use cloaking to evade researchers. PlushDaemon hijacks router updates for supply-chain attacks.
Trending Topics
SmudgedSerpent targets U.S. Iran policy experts, tied to Charming Kitten and MuddyWater. Scattered Spider (UNC3944), LAPSUS$, and ShinyHunters (UNC6040) merge into a cybercrime alliance. NGate enables NFC-relay ATM theft. APT-C-60 refines VHDX phishing.
Trending Topics
FBI warns UNC6040 and UNC6395 are breaching Salesforce, with ties to ShinyHunters, Scattered Spider, and Lapsus$. VoidProxy phishing targets Microsoft 365, Google, and Okta. BlackNevas and Yurei ransomware expand with double-extortion tactics.
Trending Topics
TRENDING TOPICS
SEPT 02, 2025
Update: Palo Alto Networks Confirmed in OAuth
Trending Topics
SafePay claims the Ingram Micro breach. Mustang Panda hits maritime shipping firms via USB malware. ShinyHunters, overlapping with Scattered Spider (UNC3944), exploits Salesforce via vishing. APT28 deploys AI-powered LameHug malware.
Trending Topics
ShinyHunters (UNC6040) runs a vishing campaign to exploit Salesforce for data theft. Outlook's HTML rendering quirk lets phishing links bypass security. Scattered Spider hits hospitality, telecom, finance, and retail via vishing and DragonForce ransomware. Chaos RAT targets Windows and Linux.