Hacker Group Targets Oracle Software in Cyber Extortion Campaign
Hacker Group Targets Oracle Software in Cyber Extortion Campaign
Updated at: June 15, 2026 at 03:30 AM
In June 2026, the cybersecurity landscape was shaken by a significant extortion campaign.
The threat actor group known as ShinyHunters (UNC6240) launched a sophisticated attack targeting Oracle PeopleSoft software.
By exploiting a critical zero-day vulnerability, CVE-2026-35273, the group gained unauthorized remote code execution access to servers without needing any authentication.
This vulnerability, which earned a near-perfect CVSS score of 9.8, allowed attackers to infiltrate over 100 organizations between May 27 and June 9, 2026.
Once inside, the attackers deployed custom remote-management agents to steal sensitive data, such as student information and financial records, threatening to leak them online.
This incident marks a notable shift in cybercrime, where attackers prioritize direct data theft over traditional encryption-based ransomware.
It also highlights the risks of vendor aggregation, where a single software flaw can impact numerous organizations at once.
