BCON Collective uncovers shared phishing infrastructure linked to ShinyHunters
BCON Collective finds ShinyHunters phishing infrastructure with over 100 domains.
Bridewell's BCON Collective has uncovered a large-scale phishing infrastructure comprising over 100 malicious domains. Initially identified through a blocked vishing attempt, the investigation revealed connections to the ShinyHunters cybercriminal group, indicating a sophisticated and active phishing campaign.
AI summary of the linked source. Not reviewed by an editor. How this works
Run BCON Collective?
Get an email when a new story names BCON Collective, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe BCON Collective's investigation reveals how a single blocked vishing attempt can be the tip of a much larger, coordinated phishing operation — in this case linked to the prolific ShinyHunters group operating over 100 malicious domains. The root cause lies in insufficient user awareness and detection capabilities that allow sophisticated social engineering campaigns to operate at scale before being identified. Phishing and vishing attacks exploit human trust, making them effective even against technically hardened organisations. The ShinyHunters connection underscores that modern phishing infrastructure is professionalised, reusable, and shared across criminal networks, amplifying its reach and impact. Early detection and threat intelligence sharing, as demonstrated here, are critical to disrupting these campaigns before significant harm occurs.
What helps against this
How we list vendors- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.