Member-only story
ShinyHunters Is Splitting Apart: Inside the Cybercrime Group’s Battle for Control
September arrests didn’t end the ShinyHunters operation. Instead, they exposed a deeper conflict involving rival factions, disputed ransom claims, and a fight over who controls one of cybercrime’s most recognizable names.
The arrests of suspected ShinyHunters members in September were supposed to disrupt the cybercrime group — but by October, a different kind of battle was unfolding: criminals were fighting over the ShinyHunters identity itself.
At least three competing factions reportedly claimed to represent the real ShinyHunters, publicly accusing one another of deception while making overlapping claims about stolen corporate data.
The situation became particularly confusing when different factions appeared to direct victims toward the same download server, despite their public disagreements.
This is more than a rivalry between cybercriminals. It is a warning that dismantling a hacking group’s leadership does not necessarily dismantle its infrastructure, reputation, or ability to extort victims.
