ShinyHunters added ReliaQuest to its DLS yesterday.
ReliaQuest responded with an entire blog post showing how ShinyHunters got nowhere.
"Our defense in depth starts from the assumption that a threat actor will eventually phish someone's account. Phishing works. Even well-trained people can be deceived by a convincing caller who knows a teammate's name. We don't treat a sign-in to our identity provider as permission to do anything at all. Our controls include device trust which prevent non-ReliaQuest devices from accessing any application or systems and containment actions terminated the attacker's sessions, expired the password, and reset every authentication factor."
Read their full blog post:
https://reliaquest.com/blog/threat-spotlight-social-engineering-attempt-against-reliaquest-what-we-found
#infosec #cybersecurity #reliaquest #shinyhunters
Dissent Doe :cupofcoffee:
npub17l…k4kr3
2026-08-24 11:42:52 UTC
Author Public Key
npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3Seen on
wss://relay.momostr.pinkPublished at
2026-08-24 11:42:52 UTCEvent JSON
{
"id": "a53afb46c26dcc35fa22d28169749ead81a872f794e9d0c3e0bb7475be4c5775",
"pubkey": "f7e862be47062cace492682f0bdfa7f874c2034cbc5de650015230915e1bebff",
"created_at": 1787571772,
"kind": 1,
"tags": [
[
"t",
"shinyhunters"
],
[
"proxy",
"https://infosec.exchange/@PogoWasRight/117150303677996382",
"web"
],
[
"t",
"cybersecurity"
],
[
"t",
"reliaquest"
],
[
"t",
"infosec"
],
[
"proxy",
"https://infosec.exchange/users/PogoWasRight/statuses/117150303677996382",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/PogoWasRight/statuses/117150303677996382",
"pink.momostr"
],
[
"-"
]
],
"content": "ShinyHunters added ReliaQuest to its DLS yesterday. \n\nReliaQuest responded with an entire blog post showing how ShinyHunters got nowhere. \n\n\"Our defense in depth starts from the assumption that a threat actor will eventually phish someone's account. Phishing works. Even well-trained people can be deceived by a convincing caller who knows a teammate's name. We don't treat a sign-in to our identity provider as permission to do anything at all. Our controls include device trust which prevent non-ReliaQuest devices from accessing any application or systems and containment actions terminated the attacker's sessions, expired the password, and reset every authentication factor.\"\n\nRead their full blog post:\n\nhttps://reliaquest.com/blog/threat-spotlight-social-engineering-attempt-against-reliaquest-what-we-found\n\n#infosec #cybersecurity #reliaquest #shinyhunters",
"sig": "6213a0a64516817b978d24e858fb078f351a2ce712b74fb466ea29d27008d5e13acc608810cc4d6d1499fc86b9d45c1b9c8cbf8686937b4bfb3a915ca9e00df5"
}