Scattered Lapsus$ Hunters Registered 40+ Domains Mimicking Zendesk Environments

Cybersecuritynews •Tushar Subhra Dutta • November 28, 2025

A sophisticated, complex new cyber offensive has emerged from the “Scattered Lapsus$ Hunters,” a threat collective that has aggressively shifted toward exploiting supply-chain vulnerabilities. This latest campaign targets Zendesk, a critical customer support platform, effectively turning a trusted business tool into a launchpad for corporate spying. The attackers have successfully registered over 40 typosquatted domains, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Scattered Lapsus$ Hunters Target Zendesk with Typosquatted Domains The Scattered Lapsus$ Hunters have launched a cyber offensive exploiting supply-chain vulnerabilities by registering over 40 typosquatted domains that mimic Zendesk environments. This campaign aims to turn Zendesk, a widely used customer support platform, into a tool for corporate espionage. Organizations using Zendesk may be at risk of being targeted through these malicious domains. 2 sources 26

Scattered Lapsus$ Hunters Registered 40+ Domains Mimicking Zendesk Environments

The full story

Extracted Entities

Attack Types (1)

Companies (1)