Attack Groups UNC6240: Mandiant’s Tracking Name for ShinyHunters June 25, 2026 ♡Follow0 Mandiant tracks the ShinyHunters group as UNC6240, attributing the Oracle PeopleSoft zero-day exploitation campaign to them. Discovered from: ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities MandiantShinyHuntersUNC6240