Unc6240 — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
November 20, 2025
Last Seen
June 12, 2026

Related Threat Clusters

  • ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

    A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability…

    65 articles · Updated June 11, 2026
  • New Pink Extortion Group Targets Microsoft 365 via Voice Phishing

    The newly identified Pink extortion group has emerged, utilizing voice phishing (vishing) tactics to gain access to Microsoft 365 accounts. Researchers from Unit 42 have tracked the group under cluster designation…

    9 articles · Updated June 4, 2026
  • Rise of AI-Driven Scams Targeting UK SMEs

    UK small and medium-sized enterprises (SMEs) are increasingly vulnerable to sophisticated AI-driven scams, as highlighted by recent reports. The emergence of 'AI scams 2.0' combines traditional social engineering…

    802 articles · Updated March 12, 2026
  • Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers

    A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is…

    30 articles · Updated November 23, 2025
  • ShinyHunters Claims Gainsight Breach via Salesloft Drift Access

    ShinyHunters has taken responsibility for a breach of Gainsight, impacting hundreds of Salesforce customers. The group stated they accessed Gainsight through vulnerabilities exploited during the Salesloft Drift hack…

    2 articles · Updated November 22, 2025
  • Data Breach Affects Over 200 Companies via Gainsight Integration with Salesforce

    Hackers compromised Salesforce-stored data from more than 200 companies through a supply chain attack involving Gainsight applications. Google confirmed the breach, stating that unauthorized access to customer data was…

    44 articles · Updated November 27, 2025

Recent Intelligence Reports

  • Oracle PeopleSoft 0 — Cybersecuritynews · June 12, 2026
  • Voice Phishing Data Extortion — cloud.google.com · June 5, 2026
  • The phone call is the new phishing email — Cyberscoop · March 23, 2026
  • ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago — Theregister · November 21, 2025
  • Hundreds of Salesforce customers hit by yet another third — Cyberscoop · November 20, 2025
  • Another Salesforce-linked data breach has ShinyHunters' fingerprints all over it — Theregister · November 20, 2025

CVSS v3.1 Breakdown