A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
Since August 8, 2025, the young collective that unites three well-known cybercrime groups—Scattered Spider, LAPSUS$, and ShinyHunters—has established at least 16 Telegram channels.
According to a report shared with The Hacker News by Trustwave SpiderLabs, a LevelBlue company, the group's Telegram channels have been deleted and recreated at least 16 times since their launch under different versions of the original name. This cycle reflects platform moderation and the operators' resolve to maintain this particular kind of public presence despite disruption.
Early in August, a group known as Scattered LAPSUS$ Hunters (SLH) appeared and began extorting data from businesses, particularly those that had recently used Salesforce. Its main product is an extortion-as-a-service (EaaS) that ot...