ShinyHunters breach data weaponized in $2,000 sextortion campaign

Sun, 26 Jul 2026 12:14:17 +0000

Engineer — Skip
SOC/IR — Learn: ShinyHunters-leaked emails are now being used as lures in sextortion campaigns; no novel TTPs or IOCs are provided, but awareness helps triage any related user-reported phishing tickets.
Leader — Learn: If your organization’s user emails were exposed in ShinyHunters breaches, employees may receive these extortion emails; brief HR and helpdesk on the campaign so they can field employee reports without escalating to a formal incident.

Sextortion on CuraSec