← Back to Actors
ShinyHunters
ShinyHuntersUNC6240Bling Libra
[ShinyHunters](https://attack.mitre.org/groups/G1057) is a cyber criminal collective that has been active since at least 2019 operating under the ShinyCorp persona. [ShinyHunters](https://attack.mitre.org/groups/G1057) has targeted multiple industries and geographic regions gathering legitimate credentials and personally identifiable information (PII) for resale or extortion of victims. [ShinyHunters](https://attack.mitre.org/groups/G1057) has been associated with the broader collective called The Community, also known as The Com whose members have also included [Scattered Spider](https://atta...
46
Techniques
41
Covered
5
Gaps
89%
Coverage
Coverage41/46
GAPS (5)
COVERED (41)
T1016System Network Configuration Discovery41 det.T1018Remote System Discovery52 det.T1036.005Match Legitimate Resource Name or Location49 det.T1059.007JavaScript64 det.T1059.009Cloud API7 det.T1069.003Cloud Groups21 det.T1072Software Deployment Tools13 det.T1078Valid Accounts320 det.T1078.002Domain Accounts28 det.T1078.004Cloud Accounts200 det.T1082System Information Discovery91 det.T1083File and Directory Discovery49 det.T1090.003Multi-hop Proxy9 det.T1105Ingress Tool Transfer199 det.T1110Brute Force100 det.T1190Exploit Public-Facing Application240 det.T1195.001Compromise Software Dependencies and Development Tools10 det.T1203Exploitation for Client Execution81 det.T1210Exploitation of Remote Services40 det.T1213.003Code Repositories9 det.T1213.006Databases2 det.T1219Remote Access Tools51 det.T1485Data Destruction100 det.T1491.001Internal Defacement4 det.T1528Steal Application Access Token61 det.T1530Data from Cloud Storage39 det.T1550.001Application Access Token45 det.T1552.001Credentials In Files62 det.T1560.002Archive via Library1 det.T1567Exfiltration Over Web Service53 det.T1573.002Asymmetric Cryptography7 det.T1580Cloud Infrastructure Discovery31 det.T1583.001Domains69 det.T1588.002Tool13 det.T1589.001Credentials2 det.T1593.003Code Repositories2 det.T1595.002Vulnerability Scanning13 det.T1598Phishing for Information1205 det.T1598.003Spearphishing Link353 det.T1619Cloud Storage Object Discovery6 det.T1657Financial Theft15 det.