{
    "count": 31,
    "indicators": [
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.intel471.com\/blog\/shinyhunters-data-breach-mitre-attack",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 6,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/shinyhunters-ransomware-extortion\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/shinyhunters-targets-education-sector-oracle-exploit",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/expansion-shinyhunters-saas-data-theft",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/socradar.io\/dark-web-profile-shinyhunters\/",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:30"
        },
        {
            "ioc_value": "https:\/\/www.resecurity.com\/blog\/article\/trinity-of-chaos-the-lapsus-shinyhunters-and-scattered-spider-alliance-embarks-on-global-cybercrime-spree",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/expansion-shinyhunters-saas-data-theft\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:34"
        },
        {
            "ioc_value": "https:\/\/cyberwarzone.com\/shinyhunters-22-year-old-member-pleads-guilty-to-cyber-extortion-causing-6-million-in-damage\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.bitdefender.com\/blog\/hotforsecurity\/pizza-hut-australia-leaks-one-million-customers-details-claims-shinyhunters-hacking-group\/",
            "ioc_type": "url",
            "category": "Threat Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:13:00",
            "last_seen": "2026-08-06 14:45:33"
        },
        {
            "ioc_value": "https:\/\/www.ransomware.live\/group\/shinyhunters",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:26",
            "last_seen": "2026-08-06 14:45:05"
        },
        {
            "ioc_value": "https:\/\/www.ransomlook.io\/group\/shinyhunters",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "https:\/\/www.intel471.com\/blog\/shinyhunters-data-breach-mitre-attack\\n\\nHere\u2019s",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.intel471.com\/blog\/shinyhunters-data-breach-mitre-attack\\n\\nbeing",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.intel471.com\/blog\/shinyhunters-data-breach-mitre-attack\\n\\nExfiltration",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/www.intel471.com\/blog\/shinyhunters-data-breach-mitre-attack\\n\\nPage",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nShinyHunters",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nFigure",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nThreat",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nThese",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nEclecticIQ",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nFigure\\n\\n15",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\ntesting",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nmanufacturing",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\naffiliates",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nNew",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\n23[.]94[.]126[.]63\\n\\n198[.]244[.]224[.]200\\n\\nadmiring-shockley[.]196-251-83-162[.]plesk[.]page\\n\\nbless-invite[.]com\\n\\nget-carrot-zoom[.]com\\n\\nmodernatx-zoom[.]com\\n\\nrecurly-zoom[.]com\\n\\nEvilginx",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/unit42.paloaltonetworks.com\/shinyhunters-ransomware-\\n\\nextortion\/\\n\\n[2]\u00a0\u201cDefending",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nrecommendations\\n\\n[3]",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/reliaquest.com\/blog\/threat-spotlight-shinyhunters-data-breach-targets-salesforce-amid-scattered-\\n\\nspider-collaboration\/\\n\\n[16]\u00a0\u201cVirusTotal",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        },
        {
            "ioc_value": "https:\/\/blog.eclecticiq.com\/shinyhunters-calling-financially-motivated-data-extortion-group-targeting-enterprise-cloud-applications\\n\\nPage",
            "ioc_type": "url",
            "category": "Threat Reports",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:12:36",
            "last_seen": "2026-08-06 13:12:36"
        }
    ]
}