Hunt / shadowbyt3$
ShadowByt3$
9victims, 90d
Sep 16last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how ShadowByt3$ gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-09-16 | HandyTrac Greystar AZ WARNING | US |
| 2026-09-15 | HandyTrac (Greystar Litchfield Park, AZ) | US |
| 2026-09-10 | John Engel Team | US |
| 2026-09-07 | Ben Leeds Properties | GB |
| 2026-08-29 | BayView Real Estate | US |
| 2026-08-28 | Bayview Real Estate WARNING | US |
| 2026-08-25 | Sinar Mas Agribusiness and Food Golden Agri-Resources) | ID |
| 2026-08-25 | A-Plus Software Limited | GB |
| 2026-08-25 | Knottingham Trent University | GB |
Latest 9 of 9, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for ShadowByt3$, or the reports cite values without marking them as IOCs. package.json