A cybercriminal group that used voice phishing attacks to siphon more than a billion records from
Salesforce
customers earlier this year has launched a website that threatens to publish data stolen from dozens of Fortune 500 firms if they refuse to pay a ransom. The group also claimed responsibility for a recent breach involving
Discord
user data, and for stealing terabytes of sensitive files from thousands of customers of the enterprise software maker
Red Hat
.
The new extortion website tied to ShinyHunters (UNC6040), which threatens to publish stolen data unless Salesforce or individual victim companies agree to pay a ransom.
In May 2025, a prolific and amorphous English-speaking cybercrime group known as
ShinyHunters
launched a social engineering campaign that use