Aug 12, 03:30 PM

ShinyHunters, Scattered Spider Unite in Phishing Drive Against Banks

Two well-known cyber-extortion gangs, ShinyHunters and Scattered Spider, are collaborating on a global phishing and extortion campaign that initially targets Salesforce customers and is expected to pivot toward banks, insurers and other financial-services firms, according to a 12 August report from cybersecurity firm ReliaQuest. Researchers say ShinyHunters has adopted Scattered Spider’s playbook, blending highly targeted voice-phishing, Okta-themed single-sign-on pages and VPN obfuscation to harvest credentials before demanding payment. Analysis of more than 700 domains created this year shows registrations following Scattered Spider patterns; those aimed at financial companies have risen 12% since July, while technology-sector targets have fallen 5%. The collaboration follows the June takedown of BreachForums and the arrest of four suspected operators, including an alleged ShinyHunters member—an event the group claims was a case of mistaken identity. Investigators have also spotted a short-lived Telegram channel, “scattered lapsu$ hunters,” advertising a forthcoming ransomware-as-a-service platform called ShinySp1d3r, reinforcing concerns that the alliance could expand its toolkit and victim list.

#ShinyHunters #Scattered Spider #Salesforce #ReliaQuest #BreachForums #Telegram #ShinySp1d3r

Written with ChatGPT .

ShinyHunters, Scattered Spider Unite in Phishing Drive Against Banks

Sources

Additional media

Similar Stories

Similar Stories