ShinyHunters’ leaked breach data used for $2,000 Bitcoin sextortion emails

Intelligence Summary

Threat actors are sending sextortion emails that leverage email addresses exposed in breaches tied to the ShinyHunters extortion operation. The messages demand about $2,000 and request payment via Bitcoin. Using real, previously leaked addresses increases credibility and the likelihood victims engage or comply. The scam relies on fear-based pressure and claims of prior access or compromise. Recipients who receive such emails should treat them as fraud, avoid replying, and report the message to their email provider.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics