CyberSIXT Search
Original

Krebs on SecurityBrianKrebs

Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’

Part of the Scattered Lapsus Hunters story · 30 articles · 11 outlets · since 12 Sep 2025

The article discusses the cybercriminal group "Scattered LAPSUS$ Hunters" (SLSH), which has gained notoriety for extorting major corporations by stealing data. The group's public face, known as "Rey," revealed his identity after being contacted by KrebsOnSecurity. SLSH is believed to be a combination of three hacking groups and has employed social engineering tactics to infiltrate organizations, notably using voice phishing to access Salesforce data.

They have launched a data leak portal threatening to publish stolen information from companies like Toyota and Disney unless ransoms are paid. SLSH is also recruiting insiders from large companies to facilitate their attacks. Rey, a key member, has released a new ransomware-as-a-service called "ShinySp1d3r" and has a history of operational security mistakes that led to his identification. He is reportedly trying to distance himself from cybercrime and has been in contact with law enforcement.

Story timeline Scattered Lapsus Hunters

Full timeline
Show as table
Scattered Lapsus Hunters coverage
Published (UTC)OutletHeadline
Wed 26 Nov 2025 · 17:50 UTCKrebs on SecurityMeet Rey, the Admin of ‘Scattered Lapsus$ Hunters’ (this article)
Wed 29 Apr · 11:32 UTCArs TechnicaTrivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCP
Mon 27 Jul · 19:31 UTCDataBreachesFrontier Airlines faces third breach as security flaws linger

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device