Lapsus$ Hunters — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 14, 2025
Last Seen
January 6, 2026

Related Threat Clusters

  • Jaguar Land Rover Cyberattack Costs £485m in Q2 2025

    Jaguar Land Rover (JLR) reported a £485 million loss for Q2 2025 following a cyberattack that shut down production for over a month. The attack, which occurred in August, resulted in exceptional costs of £196 million…

    12 articles · Updated November 17, 2025
  • JLR Cyber Attack Causes Significant Drop in UK Car Production

    Jaguar Land Rover (JLR), the UK's largest automotive employer, experienced a cyber attack on August 31, 2025, which halted production. As a result, UK car production fell by 24% in October compared to the previous year,…

    21 articles · Updated November 28, 2025
  • Researchers Trap Scattered Lapsus$ Hunters in Honeypot

    Researchers have successfully lured members of the Lapsus$ hacking group into a honeypot using fake accounts and synthetic data. This operation allowed them to gather valuable information on the hackers' servers. The…

    3 articles · Updated January 6, 2026
  • Scattered Lapsus$ Hunters Target Zendesk with Typosquatted Domains

    The Scattered Lapsus$ Hunters have launched a cyber offensive exploiting supply-chain vulnerabilities by registering over 40 typosquatted domains that mimic Zendesk environments. This campaign aims to turn Zendesk, a…

    2 articles · Updated November 28, 2025

Recent Intelligence Reports

  • Researchers Trap Scattered Lapsus$ Hunters in Honeypot — Feeds.Feedburner · January 6, 2026
  • Lapsus$ Hunters Register 40+ Domains Impersonating Zendesk Environments — Gbhackers · November 27, 2025
  • Jaguar Land Rover cyber attack costs firm £485m in the quarter — Computerweekly · November 14, 2025

CVSS v3.1 Breakdown