Threat Actor Profile
Low Cybercriminal
Description

Likely associated with the cybercrime group BlingLibra (ShinyHunters)

Confidence Score
100%
Known Aliases
ShinySpider
Tags
ransomware ransomware.live ShinySpider
First Seen

Unknown

Last Updated

Unknown

Active Status
Active
Created

April 29, 2026

Indicators of Compromise

Loading IOCs…

IOC KQL for Sentinel
STIX Data
{'added_date': '2025-11-15',
 'client': '2003264@sit.singaporetech.edu.sg',
 'description': 'Likely associated with the cybercrime group BlingLibra '
                '(ShinyHunters)',
 'firstseen': None,
 'group': 'ShinySp1d3r',
 'has_negotiations': False,
 'has_ransomnote': True,
 'lastseen': None,
 'locations': [{'available': False,
                'fqdn': 'sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
                'slug': 'http://sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
                'title': '',
                'type': 'DLS'}],
 'negotiation_count': 0,
 'ransomnotes_count': 1,
 'tiaras_metadata': {'has_negotiations': False,
                     'has_ransomnote': True,
                     'locations': [{'available': False,
                                    'fqdn': 'sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
                                    'slug': 'http://sh1nysp1d3rxyz123456789abcdefghijklmnopqrstuvwxyz.onion',
                                    'title': '',
                                    'type': 'DLS'}],
                     'negotiation_count': 0,
                     'ransomnotes_count': 1,
                     'ransomware_live_group': 'shinysp1d3r',
                     'tools': {},
                     'url': 'https://www.ransomware.live/group/shinysp1d3r',
                     'victims': 0,
                     'vulnerabilities': []},
 'tiaras_source': 'ransomware.live',
 'tools': {},
 'ttps': [],
 'url': 'https://www.ransomware.live/group/shinysp1d3r',
 'victims': 0,
 'vulnerabilities': []}
Quick Actions