Sign in Subscribe

Scattered LAPSUS$

Scattered LAPSUS$ Hunters (SLH) is a 2025 extortion brand that borrows reputation from Scattered Spider, ShinyHunters, and the disrupted LAPSUS$ group. Trustwave assesses it as a situational alliance or brand container, not a unified group with centralized command.

Trending Topics

Scattered LAPSUS$

Trending Topics

Scattered LAPSUS$ Hunters recruits women for social-engineering help-desk calls, offering $500-$1,000 per successful attempt. AWS confirms drone strikes damaged Middle East datacenters in UAE and Bahrain. CyberStrikeAI links to mass FortiGate exploitation.

Trending Topics

Trending Topics

ShinyHunters and Scattered Spider intrusions show identity is now the top SaaS attack vector. State-backed actors compromised Notepad++'s update servers. ShadowHS delivers fileless Linux post-exploitation. Arsink Android RAT impersonates 50+ consumer brands.

Trending Topics

Trending Topics

ShadowV2 spreads a Mirai-based botnet during the AWS outage, testing scale across IoT devices. Scattered LAPSUS$ Hunters expand to Zendesk with typosquatted domains and fake support tickets. A legacy PyPI bootstrap script exposes packages to domain takeover.

Trending Topics

Trending Topics

SmudgedSerpent targets U.S. Iran policy experts, tied to Charming Kitten and MuddyWater. Scattered Spider (UNC3944), LAPSUS$, and ShinyHunters (UNC6040) merge into a cybercrime alliance. NGate enables NFC-relay ATM theft. APT-C-60 refines VHDX phishing.

Trending Topics

Trending Topics

Cl0p exploits an Oracle E-Business Suite zero-day, with infrastructure links to Scattered LAPSUS$ Hunters. XWorm adds a ransomware module and 35+ plugins. TamperedChef steals credentials via a fake PDF editor. Yurei ransomware adds anti-forensic wiping.