ShinyHunters-linked channel demands $1M from Stripe in 72 hours, alleging flaw exposes millions of accounts
TechNadu · x · 2026-10-22
A Telegram channel claiming links to ShinyHunters, LAPSUS$, and UNC6783 issued a 72-hour, $1M Bitcoin extortion demand to Stripe, alleging an undisclosed vulnerability that could siphon funds from millions of accounts.
Separately, a group named ShinyEquationCartel is advertising alleged Windows RDP and Apple Remote Desktop zero-days, plus stolen data from fintech vendors Backbase and Global-e. Researchers note all claims remain unverified but reflect an escalating wave of joint criminal campaigns targeting financial and remote-management infrastructure.
More from Safety
- Anthropic's deputy security chief warns AI-driven security crisis will worsen for ~18 months — ns123abc · 2026-10-23
- MCP server turned rogue 30 days after approval, prompting open-source mcp-guard lockfile tool — ErgoniaWorks · 2026-10-23
- Argus launches to find card numbers and API keys leaked into tickets and comments — Scobleizer · 2026-10-23
- The 'antifragile internet' case: AI agents slash attack costs toward zero — rebeccakaden · 2026-10-23
- Microsoft: China-aligned hackers used ARTEX AI agents to hit 2,250+ M365 tenants — rickasaurus · 2026-10-23
- ZaRemba AI Watcher: free open-source local scanner for rogue agents and leaked keys — Tasty-Molasses-9587 · 2026-10-23