Threat Actor Profile
Low
Cybercriminal
Description
Likely associated with the cybercrime group BlingLibra (ShinyHunters)
Confidence Score
Known Aliases
ShinySpider
Tags
ransomware
ransomware.live
ShinySpider
First Seen
Unknown
Last Updated
Unknown
Active Status
ActiveCreated
April 29, 2026
Indicators of Compromise
Loading IOCs…
IOC KQL for Sentinel
STIX Data
{'added_date': '2025-11-15',
'client': '2003264@sit.singaporetech.edu.sg',
'description': 'Likely associated with the cybercrime group BlingLibra '
'(ShinyHunters)',
'firstseen': None,
'group': 'ShinySp1d3r',
'has_negotiations': False,
'has_ransomnote': True,
'lastseen': None,
'locations': [{'available': False,
'fqdn': 'sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
'slug': 'http://sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
'title': '',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 1,
'tiaras_metadata': {'has_negotiations': False,
'has_ransomnote': True,
'locations': [{'available': False,
'fqdn': 'sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
'slug': 'http://sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
'title': '',
'type': 'DLS'}],
'negotiation_count': 0,
'ransomnotes_count': 1,
'ransomware_live_group': 'shinysp1d3r',
'tools': {},
'url': 'https://www.ransomware.live/group/shinysp1d3r',
'victims': 0,
'vulnerabilities': []},
'tiaras_source': 'ransomware.live',
'tools': {},
'ttps': [],
'url': 'https://www.ransomware.live/group/shinysp1d3r',
'victims': 0,
'vulnerabilities': []}