{"id":121265,"date":"2025-08-14T08:16:01","date_gmt":"2025-08-14T08:16:01","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=121265"},"modified":"2025-08-14T13:15:23","modified_gmt":"2025-08-14T13:15:23","slug":"shinyhunters-possibly-collaborates-with-scattered-spider","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/","title":{"rendered":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns"},"content":{"rendered":"\n<p>The notorious ShinyHunters cybercriminal group has emerged from a year-long hiatus with a sophisticated new wave of attacks targeting Salesforce platforms across major organizations, including high-profile victims like Google.<\/p>\n\n\n\n<p>This resurgence marks a significant tactical evolution for the financially motivated threat actors, who have traditionally focused on database exploitation and credential theft rather than the complex social engineering schemes now being employed.<\/p>\n\n\n\n<p>What makes this campaign particularly alarming is its striking resemblance to operations typically attributed to the Scattered Spider hacking collective.<\/p>\n\n\n\n<p>The convergence of tactics suggests a potential collaboration between these two formidable threat groups, raising concerns about an escalating landscape of coordinated cybercriminal activity.<\/p>\n\n\n\n<p>The attacks have specifically targeted organizations across retail, aviation, and insurance sectors, with victims spanning luxury brands and technology service providers.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEj1xIQ08a_UlCzNigyywCjO3uHauDfzQrCCJ422k96AaqaUfF3LY2t8dmgHcwRQ1K9LgjHWvYfhu5hVBrvTNbKlTKJ-45A4EwLWQBN47TmA_oR0bXBUQXiXxAyuaQGWeQsJmcArA9P_LkGCJS-k16pwgfWEudl-wtuE5JwNqIZf3z1ie-yC1FRAu_Dulz4\/s16000\/ShinyHunters%20first%20gained%20notoriety%20by%20advertising%2091%20million%20Tokopedia%20user%20records%20for%20sale%20on%20%E2%80%9CEmpire%20Market%E2%80%9D%20in%202020%20(Source%20-%20Reliaquest).webp\" alt=\"\"\/><figcaption class=\"wp-element-caption\">ShinyHunters first gained notoriety by advertising 91 million Tokopedia user records for sale on \u201cEmpire Market\u201d in 2020 (Source &#8211; Reliaquest)<\/figcaption><\/figure><\/div>\n\n\n<p>ReliaQuest analysts <a href=\"https:\/\/reliaquest.com\/blog\/threat-spotlight-shinyhunters-data-breach-targets-salesforce-amid-scattered-spider-collaboration\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">identified<\/a> compelling evidence supporting this collaboration theory through comprehensive domain analysis and infrastructure investigation.<\/p>\n\n\n\n<p>The research revealed coordinated ticket-themed phishing domains and Salesforce credential harvesting pages, indicating a systematic approach to victim targeting.<\/p>\n\n\n\n<p>Most notably, investigators discovered the emergence of a BreachForums user with the alias &#8220;Sp1d3rhunters&#8221;\u2014a clever combination of both group names\u2014who was linked to previous <a href=\"https:\/\/cybersecuritynews.com\/shinyhunters-breaches\" target=\"_blank\" rel=\"noreferrer noopener\">ShinyHunters<\/a> breaches and appeared to leak Ticketmaster data in July 2024.<\/p>\n\n\n\n<p>The technical sophistication of these attacks represents a significant departure from ShinyHunters&#8217; historical methods.<\/p>\n\n\n\n<p>The group has adopted <a href=\"https:\/\/cybersecuritynews.com\/scattered-spider-hackers-aviation\/\" target=\"_blank\" rel=\"noreferrer noopener\">Scattered Spider<\/a>&#8216;s signature techniques, including highly targeted vishing campaigns where attackers impersonate IT support staff to manipulate victims into authorizing malicious &#8220;connected apps.&#8221;<\/p>\n\n\n\n<p>These applications masquerade as legitimate Salesforce tools while enabling large-scale data exfiltration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-advanced-infrastructure-and-evasion-techniques\"><strong>Advanced Infrastructure and Evasion Techniques<\/strong><\/h2>\n\n\n\n<p>The campaign&#8217;s infrastructure reveals meticulous planning and advanced evasion capabilities.<\/p>\n\n\n\n<p>Investigators uncovered multiple malicious domains registered between June 20-30, 2025, following consistent naming patterns such as <code>ticket-lvmh.com<\/code>, <code>ticket-dior.com<\/code>, and <code>ticket-louisvuitton.com<\/code>.<\/p>\n\n\n\n<p>These domains shared common registry characteristics, including registration through GMO Internet using temporary email addresses like <code>email@mailshan.com<\/code> and Cloudflare-masked nameservers for additional <a href=\"https:\/\/cybersecuritynews.com\/malware-obfuscation\/\" target=\"_blank\" rel=\"noreferrer noopener\">obfuscation<\/a>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhSJeIXKI-v30VGxHynUUL9wMPM2qIq0YXi1dhEpk7Rt6gaMFwWNFJ15jy0SmzOKm2-g60OSD3-ADHmoq78ra8SPapbhkVticnnDn5x9fDhAzfFbSxCrGehGZlEeQNFlFOltOcl_LCvfgA6sABhwkTUlsg16leE3OTezb11touJyULfMsSl8ju-z2LhBo0\/s16000\/Phishing%20page%20hosted%20at%20dashboard-salesforce%5B.%5Dcom%20(Source%20-%20Reliaquest).webp\" alt=\"\"\/><figcaption class=\"wp-element-caption\">Okta phishing page hosted at ticket-dior[.]com in June 2025 (Source &#8211; Reliaquest)<\/figcaption><\/figure><\/div>\n\n\n<p>The attackers deployed sophisticated phishing kits hosting single sign-on (SSO) login pages, with domains like <code>dashboard-salesforce.com<\/code> actively serving Okta-branded credential harvesting interfaces.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgnr4tWc78P7fkj66V3U-p4K9OutDNQZFRqOGyOTBdEo_9avndEh2zHc3hpdXvjjvJ3mP79ldbxlwEkN3RTet-BT-9ZDOykbW3bzwVt8aFw6aFfmtv2YTaoUJUIjYyyyNVWYxuHItZRvombzVic8Wah14n9SCv06bslJKw-nPqJOa03wioDRGh2AZQVnHQ\/s16000\/Okta%20phishing%20page%20hosted%20at%20ticket-dior%5B.%5Dcom%20in%20June%202025%20(Source%20-%20Reliaquest).webp\" alt=\"\"\/><figcaption class=\"wp-element-caption\">Phishing page hosted at dashboard-salesforce[.]com (Source &#8211; Reliaquest)<\/figcaption><\/figure><\/div>\n\n\n<p>The malicious infrastructure leveraged VPN obfuscation through Mullvad VPN services to perform <a href=\"https:\/\/cybersecuritynews.com\/cl0p-ransomware-data-exfiltration-vulnerable\/\" target=\"_blank\" rel=\"noreferrer noopener\">data exfiltration<\/a> from compromised Salesforce instances.<\/p>\n\n\n\n<p>Particularly concerning is the rebranding of legitimate Salesforce &#8220;Data Loader&#8221; applications as &#8220;My Ticket Portal&#8221; during vishing campaigns, demonstrating the group&#8217;s ability to weaponize familiar business tools against unsuspecting employees.<\/p>\n\n\n\n<p>This tactical evolution, combined with the synchronized targeting patterns observed across both ShinyHunters and Scattered Spider operations, suggests that financial services and technology providers should prepare for intensified attacks in the coming months.<\/p>\n\n\n\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 90%,rgb(169,184,195) 100%)\"><strong><code>Boost&nbsp;your&nbsp;SOC and help your team protect your business with free top-notch threat intelligence:&nbsp;<a href=\"https:\/\/intelligence.any.run\/plans\/?utm_source=csn&amp;utm_medium=article&amp;utm_campaign=alert_fatigue&amp;utm_content=lookup_plan&amp;utm_term=120825\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Request TI Lookup Premium Trial<\/a>.<\/code><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The notorious ShinyHunters cybercriminal group has emerged from a year-long hiatus with a sophisticated new wave of attacks targeting Salesforce platforms across major organizations, including high-profile victims like Google. This resurgence marks a significant tactical evolution for the financially motivated threat actors, who have traditionally focused on database exploitation and credential theft rather than the [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":121357,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,48],"tags":[149,151],"class_list":{"0":"post-121265","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-threats","9":"tag-cyber-security","10":"tag-cyber-security-news"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.7.1 (Yoast SEO v25.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns<\/title>\n<meta name=\"description\" content=\"ShinyHunters return with Salesforce attacks hitting major firms like Google, using tactics akin to Scattered Spider, sparking collab fears.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns\" \/>\n<meta property=\"og:description\" content=\"ShinyHunters return with Salesforce attacks hitting major firms like Google, using tactics akin to Scattered Spider, sparking collab fears.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-14T08:16:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-14T13:15:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns","description":"ShinyHunters return with Salesforce attacks hitting major firms like Google, using tactics akin to Scattered Spider, sparking collab fears.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/","og_locale":"en_US","og_type":"article","og_title":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns","og_description":"ShinyHunters return with Salesforce attacks hitting major firms like Google, using tactics akin to Scattered Spider, sparking collab fears.","og_url":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-08-14T08:16:01+00:00","article_modified_time":"2025-08-14T13:15:23+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp","type":"image\/jpeg"}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns","datePublished":"2025-08-14T08:16:01+00:00","dateModified":"2025-08-14T13:15:23+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/"},"wordCount":461,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news"],"articleSection":["Cyber Security News","Threats"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/","url":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/","name":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#primaryimage"},"thumbnailUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-08-14T08:16:01+00:00","dateModified":"2025-08-14T13:15:23+00:00","description":"ShinyHunters return with Salesforce attacks hitting major firms like Google, using tactics akin to Scattered Spider, sparking collab fears.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#primaryimage","url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/shinyhunters-possibly-collaborates-with-scattered-spider\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"ShinyHunters Possibly Collaborates With Scattered Spider in Salesforce Attack Campaigns"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World&#039;s #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i2.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh2m2Ewtt9pCngMYWlhmx6moeCpD82Ngt7Jcfc8bzWL5VvwNkvUpGSsvC1X04uD7V_ypNdC3Y4lBdP9CiNfB0Zu2PF2McaQY_Wp5CFTd-Rf0JIc67bJbbUKMoepkTrcy7loj5JdlAENwPYJDzRbcUeNHO2HDUNbN8my_9vINZUEIFMOlT_254HpVZ8GBiQ\/s16000\/ShinyHunters%20Possibly%20Collaborates%20With%20Scattered%20Spider%20in%20Salesforce%20Attack%20Campaigns.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/121265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=121265"}],"version-history":[{"count":3,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/121265\/revisions"}],"predecessor-version":[{"id":121636,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/121265\/revisions\/121636"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/121357"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=121265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=121265"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=121265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}