Security News > 2024 > March > A cybercriminal is sentenced, will it make a difference?

In this piece, we'll probe a notorious ransomware gang, ShinyHunters, to shed light on cybercriminal incentives and the objectives they pursue, as well as the effects for victims - and steps your team can take to reduce risk.

His role in ShinyHunters was to create specialized phishing pages masquerading as a target company's login portal to lure employees to enter their credentials.

ShinyHunters hit the scene with a massive exfiltration of account data from Tokopedia, Indonesia's largest e-commerce company.

The most recently confirmed ShinyHunters victim is Aditya Birla Fashion and Retail, based in India, one of the world's largest fashion retail companies.

Although ABFRL detected ShinyHunters while the attack was in progress, the hacking group says they still had uninterrupted access to the company's sensitive data.

A ShinyHunters staple is spear-phishing, where phishing emails and fake login pages are crafted to target specific companies and collect credentials for later use to exfiltrate data - usually sensitive customer or employee information - from the victim's network and environments.

News URL

https://www.helpnetsecurity.com/2024/03/07/shinyhunters-group/