LAPSUS$

LAPSUS

Named by CyberSIXT coverage

DEV-0537

Named by Malpedia · lapsus

LAPSUS

Named by Malpedia · lapsus

SLIPPY SPIDER

Named by Malpedia · lapsus

Strawberry Tempest

Named by Malpedia · lapsus

UNC3661

Named by Malpedia · lapsus

DEV-0537

Named by Microsoft · Strawberry Tempest

SLIPPY SPIDER

Named by Microsoft · Strawberry Tempest

category

financial (Microsoft · Strawberry Tempest)

motivation

financial (Microsoft · Strawberry Tempest)

From MITRE ATT&CK® · G1004

© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. All techniques on MITRE ATT&CK

1. 22 SepElsevier Platforms Redirected Users to LAPSUS$ Extortion PagesDataBreaches
2. 3 AprTeamPCP supply chain breach hits Mercor and EU Commission cloudsDark Reading
3. 2 AprMercor Hit by LiteLLM Supply Chain AttackSecurityWeek
4. 31 MarTeamPCP Explores Ways to Exploit Stolen Supply Chain SecretsInfosecurity
5. 30 MarTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)SANS ISC
6. 25 MarCybercrime group Lapsus$ claims the hack of pharma giant AstraZenecaSecurity Affairs
7. 24 MarExtortion Group Claims It Hacked AstraZenecaSecurityWeek
8. 23 MarAstraZeneca Data Breach: What You Need to KnowSOCRadar
9. 5 Nov 2025Three Infamous Hacker Groups Join Forces as the ‘Scattered LAPSUS$ HuntersGBHackers
10. 5 Nov 2025Trustwave Confirms ‘Trinity of Chaos’ Alliance: Scattered LAPSUS$ Hunters Form EaaS SupergroupSecurityOnline
11. 4 Nov 2025A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join ForcesThe Hacker News
12. 30 Sep 2025Scattered Spider, ShinyHunters Restructure – New Attacks UnderwaySecurity Affairs

The latest 12 are listed. See all 15 articles in the timeline.

• LAPSUS$: Recent techniques, tactics and proceduresOrkl.eu · 6 Aug
• Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’Orkl.eu · 28 Jul
• Scattered LAPSUS$ Hunters: Anatomy of a Federated Cybercriminal BrandOrkl.eu · 28 Jul
• Latest Cyber Threat Intelligence & Security InsightsOrkl.eu · 28 Jul
• Scattered LAPSUS$ Hunters: 2025's Most Dangerous Cybercrime SupergroupOrkl.eu · 28 Jul
• Resecurity | Trinity of Chaos: The LAPSUS$, ShinyHunters, and Scattered Spider Alliance Embarks on Global Cybercrime SpreeOrkl.eu · 28 Jul
• Scattered LAPSUS$ Hunters: the cybercrime alliance that will shake global businesses in 2025Orkl.eu · 28 Jul
• LAPSUS and the Terrible, Horrible, No Good, Very Bad Ransom Day 1 (UPDATED) - DataBreaches.NetOrkl.eu · 9 Apr

• ShinyHuntersNamed together in 8 articles (co-mention)
• Scattered SpiderNamed together in 7 articles (co-mention)
• TeamPCPNamed together in 3 articles (co-mention)
• Scattered Lapsus$ HuntersNamed together in 2 articles (co-mention)

• MITRE ATT&CK®MITRE ATT&CK: LAPSUS$ (G1004)
• MicrosoftMicrosoft: Strawberry Tempest
• MalpediaMalpedia: LAPSUS
• ETDAETDA: Lapsus$