Threat actor
LAPSUS$
Tracked by CyberSIXT since 12 Sep 2025 · last activity 22 Sep
Also Lapsu$Malpedia
- CVEs exploited · attributed
- 0
- CVEs also mentioned · not attributed
- 1
- articles · all time
- 9
One article in the last 45 daysThe latest: DataBreaches, Tue 22 Sep, 22:00 UTC.See the full timeline
Also mentioned alongside LAPSUS$ (not attributed)
1 CVE named in the same articlesShow 1 CVE
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code VulnerabilityCVSS9.4CriticalExploited1.8%EPSS10articles
- Elsevier Platforms Redirected Users to LAPSUS$ Extortion PagesDataBreaches
- Trivy Supply Chain Attack Hits Checkmarx, Bitwarden via TeamPCPArs Technica
- Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackThe Hacker News
- TeamPCP supply chain breach hits Mercor and EU Commission cloudsDark Reading
- TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)SANS ISC
- Cybercrime group Lapsus$ claims the hack of pharma giant AstraZenecaSecurity Affairs
- Extortion Group Claims It Hacked AstraZenecaSecurityWeek
- Three Infamous Hacker Groups Join Forces as the ‘Scattered LAPSUS$ HuntersGBHackers
- Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS SupergroupSecurityOnline · first in our coverage