James
ObscureIQ Threat Intelligence · Actor Profile
JamesConfidence: Low
Individual / alias · infrastructure operator
Also known as: "James" via shinyhunte[.]rs
Motivation: Financial
1Attributed Breaches
LowAttribution Confidence
Individual / aliasActor Type
Overview
Associated with the shinyhunte[.]rs domain, whose resemblance to ShinyHunters suggests possible impersonation or affiliate infrastructure rather than confirmed linkage. Do not attribute to ShinyHunters without corroborating WHOIS, DNS, TLS, forum, or victim evidence.
Tactics, Targeting & TTPs
Status: disputed. Actor class: possible persona or infrastructure operator. Needs WHOIS, DNS history, TLS certificate review, Telegram/forum references, and incident-specific evidence.
Related Clusters & Actors
ShinyHunters
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.