Risk Letters

Threat actor

ShinyHunters

TLP:CLEAR

Facts

  • Also known as: UNC6240, Bling Libra
  • Motivation: Financial
  • Malware and tools: Tor
  • Techniques (MITRE ATT&CK): Application Access Token, Archive via Library, Artificial Intelligence, Asymmetric Cryptography, Brute Force, Cloud Accounts, Cloud API, Cloud Groups, Cloud Infrastructure Discovery, Cloud Storage Object Discovery, Code Repositories, Compromise Software Dependencies and Development Tools
  • Last seen: 14 July 2026

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.