Skip to content
ThreatCluster

Scattered Lapsus$ Hunters Target Zendesk with Typosquatted Domains

First seen 28 Nov 2025, 06:35 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

The Scattered Lapsus$ Hunters have launched a cyber offensive exploiting supply-chain vulnerabilities by registering over 40 typosquatted domains that mimic Zendesk environments. This campaign aims to turn Zendesk, a widely used customer support platform, into a tool for corporate espionage. Organizations using Zendesk may be at risk of being targeted through these malicious domains.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 196d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Lapsus$ Hunters and Zendesk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed