CoinbaseCartel
Financially motivated threat group targeting cryptocurrency platforms and users. Further details pending analysis.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 LowAttribution signals
7 mentions · 4 sources"Researchers attribute the group's rapid expansion primarily to the reuse of stolen credentials obtained from infostealer logs."
"The group is also tracked under the alias shinysp1d3r by some researchers, who have hypothesized a connection between CoinbaseCartel and the threat actors known as ShinyHunters, Scattered Spider, and Lapsus$."
"Under this hypothesis, CoinbaseCartel is thought to share personnel or infrastructure with the Scattered LAPSUS$ Hunters (SLSH) alliance"
"These assessments remain contested, and attribution beyond superficial operational overlaps has not been validated."
Hedge terms observed