Since August 8, 2025, the young collective that unites three well-known cybercrime groups—Scattered Spider, LAPSUS$, and ShinyHunters—has established at least 16 Telegram channels.
According to a report shared with The Hacker News by Trustwave SpiderLabs, a LevelBlue company, the group’s Telegram channels have been deleted and recreated at least 16 times since their launch under different versions of the original name. This cycle reflects platform moderation and the operators’ resolve to maintain this particular kind of public presence despite disruption.
Early in August, a group known as Scattered LAPSUS$ Hunters (SLH) appeared and began extorting data from businesses, particularly those that had recently used Salesforce. Its main product is an extortion-as-a-service (EaaS) that other affiliates can sign up for in order to demand money from targets in return for leveraging the consolidated entity’s “brand” and reputation read more about A Cybercrime Merger Like No Other — Scattered Spider LAPSUS$ and ShinyHunters Join Forces.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.