ShinyHunters Calling: Financially Motivated Data Extortion Group Targeting Enterprise Cloud Applications
blog.eclecticiq.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2021-35587Oracle Fusion Middleware Unspecified VulnerabilityOracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report96.3%Top 0.12%73.7priority
Where it names them
CVE-2021-35587 Original (opens in a new tab) ↗
According to data obtained from a public Telegram channel operated by the ShinyHunters team, the threat actor persona ‘Yukari’ exploited an Oracle Access Manager vulnerability (CVE-2021-35587).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.