Cyber Threat Actor: Sharp Boys

Sharp Boys is a threat actor known by that alias and is reported to be based in Russia. The group has claimed responsibility for a cyber intrusion that targeted Israeli online services. No additional aliases or organizational affiliations are publicly documented for this actor.

On December 18 2021, Sharp Boys announced that it had breached two Israeli hiking websites, identified as Tiyuli and Lametayel. The intrusion resulted in the exfiltration of personal data belonging to approximately one hundred thousand users, including email addresses, physical addresses, phone numbers, and photographs. The actors subsequently leaked this information publicly and offered datasets purportedly containing details of around three million individuals for sale. The disclosed data exposed victims to potential identity theft and phishing risks, though the full validity of the larger offered dataset remained unverified.

The group’s public statement and the leaked material constitute the only confirmed activity attributed to Sharp Boys in open sources. No specific malware families, initial access vectors, or tooling have been referenced in the available reporting. Likewise, no clear state nexus, criminal consortium ties, or additional campaigns beyond the described website breach have been established. Consequently, the profile is limited to the facts surrounding the December 2021 incident and the actor’s stated location and alias.