← Back to Actors
ShinyHunters
ShinyHuntersUNC6240Bling Libra
[ShinyHunters](https://attack.mitre.org/groups/G1057) is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. [ShinyHunters](https://attack.mitre.org/groups/G1057) has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims. [ShinyHunters](https://attack.mitre.org/groups/G1057) has been associated with the broader collective called The Community, also known as The Com whose members have also included [Scattered Spider](https://atta...
46
Techniques
41
Covered
5
Gaps
89%
Coverage
Coverage41/46
GAPS (5)
COVERED (41)
T1016System Network Configuration Discovery41 det.T1018Remote System Discovery51 det.T1036.005Match Legitimate Resource Name or Location45 det.T1059.007JavaScript64 det.T1059.009Cloud API6 det.T1069.003Cloud Groups17 det.T1072Software Deployment Tools13 det.T1078Valid Accounts306 det.T1078.002Domain Accounts28 det.T1078.004Cloud Accounts188 det.T1082System Information Discovery88 det.T1083File and Directory Discovery48 det.T1090.003Multi-hop Proxy9 det.T1105Ingress Tool Transfer191 det.T1110Brute Force93 det.T1190Exploit Public-Facing Application233 det.T1195.001Compromise Software Dependencies and Development Tools8 det.T1203Exploitation for Client Execution80 det.T1210Exploitation of Remote Services37 det.T1213.003Code Repositories9 det.T1213.006Databases2 det.T1219Remote Access Tools46 det.T1485Data Destruction97 det.T1491.001Internal Defacement4 det.T1528Steal Application Access Token53 det.T1530Data from Cloud Storage33 det.T1550.001Application Access Token43 det.T1552.001Credentials In Files62 det.T1560.002Archive via Library1 det.T1567Exfiltration Over Web Service47 det.T1573.002Asymmetric Cryptography7 det.T1580Cloud Infrastructure Discovery26 det.T1583.001Domains68 det.T1588.002Tool13 det.T1589.001Credentials2 det.T1593.003Code Repositories2 det.T1595.002Vulnerability Scanning13 det.T1598Phishing for Information1094 det.T1598.003Spearphishing Link333 det.T1619Cloud Storage Object Discovery6 det.T1657Financial Theft15 det.