Scattered Lapsus Hunters is a digital extortion collective formed by merging Scattered Spider, LAPSUS$, and ShinyHunters.
Analyst brief
Scattered Lapsus Hunters is a collective formed in August 2025 by merging notorious English-speaking cybercriminal groups: Scattered Spider, LAPSUS$, and ShinyHunters. This actor primarily targets leading companies to steal massive amounts of data and conduct digital extortion. Their key TTPs likely include sophisticated social engineering, credential theft, MFA bypass techniques, and the use of legitimate tools for initial access into victim environments. Defenders should prioritize hardening multi-factor authentication, addressing supply chain risks, and enhancing monitoring for anomalous activities based on the known TTPs of the constituent groups.
Scattered Lapsus Hunters
Scattered Lapsus$ Hunters
unknown
Launched in August 2025, the Scattered LAPSUS$ Hunters collective has rapidly established itself as one of the most formidable threats on today’s cybercriminal landscape. This alliance brings together three of the most notorious English-speaking cybercriminal groups: Scattered Spider, LAPSUS$ and ShinyHunters. In just a few months, this organization has multiplied spectacular attacks against leading companies, stealing billions of pieces of data and perfecting the art of digital extortion.
Which cybercriminal groups merged to form Scattered Lapsus Hunters?+
Scattered Lapsus Hunters is a collective formed in August 2025 by merging the notorious English-speaking cybercriminal groups Scattered Spider, LAPSUS$, and ShinyHunters.
What TTPs are associated with the Scattered Lapsus Hunters group?+
Their key TTPs likely include sophisticated social engineering, credential theft, MFA bypass techniques, and the use of legitimate tools for initial access into victim environments.