Sinister
Attribution profile
- Type
- Hacker
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2015-03-02
- Last seen
- 2015-03-02
- Updated
- 2026-10-12 22:57
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Sinister, also known as Sinful, is a threat actor linked to Russia who in March 2015 compromised the bodybuilding and strength training website MuscularStrength.com, operated by athlete Scott Herman, and publicly released a database containing 54,096 user records that included usernames, email addresses, hashed passwords, full physical addresses, phone numbers, payment methods and, for credit‑card users, expiry dates and the last four digits of the cards. The breach caused operational disruption to the site, with repeated downtime attributed to credential‑testing attempts using the stolen data. No further details about the actor’s typical targets, strategic objectives, specific tools, malware families, access vectors, affiliations or additional campaigns are publicly available in the provided sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.