LevelBluePublished
Scattered LAPSUS$ Hunters: Anatomy of a Federated Cybercriminal Brand
By Serhii Melnyk
Excerpt
November 04, 2025 7 Minute Read by Serhii Melnyk
Trustwave SpiderLabs’ Cyber Threat Intelligence team is tracking the emergence and communication dynamics of the cybercriminal brand known as Scattered LAPSUS$ Hunters (SLH), consolidating observed activity across public platforms to provide updated insights into its structure, evolution, and operational behavior. Figure 1. The main page of the Scattered LAPSUS$ Hunters data-leak site (DLS), announcing Salesforce as one of its victims.
Public-facing materials and channel na…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by LevelBlue on levelblue.com.
Mentioned in the excerpt
More from LevelBlue4
- Unmasking a Multi-Stage Loader: AutoIt Abuse Leading to Vidar Stealer Command-and-Control CommunicationLevelBlue · Published 7 May
- CNCMahineRMSLevelBlue · Added 25 Aug
- SpiderLabs IDs New Banking Trojan Distributed Through WhatsAppLevelBlue · Published 19 Nov 2025
- LevelBlue Labs Discovers Highly Evasive, New Loader Targeting Chinese OrganizationsLevelBlue · Published 19 Jun 2024
