[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0YPEFRG2TVxGrogoZ8oOjl65PSPv_tuENYDR8VyQzSw":3},{"article":4,"iocs":53,"watch_terms":58},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":33,"category":34,"article_tags":37},"0aeccab5-40d9-44ea-8670-39316aa01f4e","‼️🇺🇸 Threat actor claims to be selling Cisco source code and database containing 3.15 million S...","threat-actor-claims-to-be-selling-cisco-source-code-and-database-containing-3-15-1db723","‼️🇺🇸 Threat actor claims to be selling Cisco source code and database containing 3.15 million Salesforce records, allegedly stolen by UNC6040\u002FShinyHunters for $500,000.\n\nThe data reportedly includes source code for various Cisco products including IOS, ASA, and NX-OS, along with https:\u002F\u002Ft.co\u002Fb4QgaRNgfa","A threat actor allegedly affiliated with UNC6040\u002FShinyHunters is offering to sell stolen Cisco proprietary source code (IOS, ASA, NX-OS) and a database containing 3.15 million Salesforce records for $500,000. The breach represents a significant supply-chain and intellectual property threat, exposing core network infrastructure code and sensitive customer data. The asking price and seller claims suggest an attempt to monetize the theft through direct sale or auction.","Threat actor claims to be selling stolen Cisco source code and 3.15M Salesforce records for $500K.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2042262638231503057","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHFeTCkLWkAEr0IM.jpg","2026-04-09T15:25:31+00:00","2026-04-09T16:00:13.721005+00:00",9,[18,21,23,26,28,30],{"name":19,"type":20},"Cisco","vendor",{"name":22,"type":20},"Salesforce",{"name":24,"type":25},"Cisco IOS","product",{"name":27,"type":25},"Cisco ASA",{"name":29,"type":25},"Cisco NX-OS",{"name":31,"type":32},"UNC6040\u002FShinyHunters","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":33,"icon":11,"name":35,"slug":36},"Breaches","breaches",[38,43,48],{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":11,"name":46,"slug":47},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":49},{"id":50,"icon":11,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":55,"value":56,"context":57},"malware","UNC6040","Threat group conducting data theft and sale operations",[19,22,24]]