#scatteredspider — Public Fediverse posts

Hackers Threaten to Leak 1 Billion Stolen Records From 39 Companies | PCMag https://www.pcmag.com/news/hackers-threaten-to-leak-1-billion-stolen-records-from-39-companies #cybersecurity #Salesforce #Salesloft #DataBreach #39companies #customers #PII #ScatteredSpider #LAPSUS #ShinyHunters

Scattered LAPSUS$ Hunters Launches Data Leak Site to Extort Salesforce Victims https://thecyberexpress.com/scattered-lapsus-hunters-salesforce-victims/ #ScatteredLapSusHunters #TheCyberExpressNews #ThreatIntelligence #cybersecuritynews #ScatteredSpider #TheCyberExpress #databreachnews #FirewallDaily #cybersecurity #cyberattacks #ShinyHunters #cybercrime #Salesforce #CyberNews #Salesloft #Dataleak #lapsus$

NEW: When “Goodbye” isn’t the end: Scattered LAPSUS$ Hunters hack on

Others seem to have interpreted their "goodbye" message differently than I had. Were they lying or did people just not understand a significant statement in their message?

And while headlines focus on them hitting a bank, I think we need to take a closer look at their attacks on the aviation sector.

https://databreaches.net/2025/09/21/when-goodbye-isnt-the-end-scattered-lapsus-hunters-hack-on/

#databreach #ScatteredSpider #ShinyHunters #LAPSUS$ #CollinsAerospace #airlines #airports

One Arrested in Sophisticated Cyber Crime:
https://www.lvmpd.com/Home/Components/News/News/2245/263

h/t, https://www.casino.org/news/teen-suspect-surrenders-in-2023-las-vegas-strip-cyberattack-case/

Las Vegas casinos not named in the press release, but sure sounds like Scattered Spider attacks.

As a reminder: Caesars was hit in August 2023 and MGM was hit in September 2023 and this teen is charged with hitting multiple casinos between August and October 2023.

#databreach #cybersecurity #MGM #Caesars #arrest #ScatteredSpider

"The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using compromised Salesloft Drift OAuth tokens.

[...]

In March, one of the threat actors breached Salesloft's GitHub repository, which contained the private source code for the company.

ShinyHunters told BleepingComputer that the threat actors used the TruffleHog security tool to scan the source code for secrets, which resulted in the finding of OAuth tokens for the Salesloft Drift and the Drift Email platforms."

Read more of Lawrence Abrams' great reporting on Bleeping Computer:
https://www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/

#Salesforce #Salesloft #Oauth #Drift #databreach #ransom #ShinyyHunters #ScatteredSpider #LAPSUS$ #UNC6040 #UNC6395

Alleged ‘Scattered Spider’ Member Extradited to U.S. https://krebsonsecurity.com/2025/04/alleged-scattered-spider-member-extradited-to-u-s/ #TylerRobertBuchanan #Ne'er-Do-WellNews #ALittleSunshine #ScatteredSpider #AhmedElbadawy #SIMSwapping #EvansOsiebo #SIMswapping #Ransomware #ransomware #JoelEvans #Mailchimp #NoahUrban #DoorDash #lastpass #0ktapus #Caesars #GroupIB #Twilio #Tylerb #Okta #MGM

Alleged ‘Scattered Spider’ Member Extradited to U.S.

https://krebsonsecurity.com/2025/04/alleged-scattered-spider-member-extradited-to-u-s/

#TylerRobertBuchanan #Ne'er-Do-WellNews #ALittleSunshine #ScatteredSpider #AhmedElbadawy #SIMSwapping #EvansOsiebo #SIMswapping #Ransomware #ransomware #JoelEvans #Mailchimp #NoahUrban #DoorDash #Group-IB #lastpass #0ktapus #Caesars #Twilio #Tylerb #Okta #MGM

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

https://krebsonsecurity.com/2024/06/alleged-boss-of-scattered-spider-hacking-group-arrested/

#Ne'er-Do-WellNews #NoahMichaelUrban #ScatteredSpider #VX-Underground #TylerBuchanan #DataBreaches #SIMSwapping #WebFraud2.0 #MurciaToday #SIMswapping #Mailchimp #DoorDash #Group-IB #lastpass #0ktapus #Caesars #KingBob #signal #TheCom #Okta #Sosa #fbi #MGM

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested https://krebsonsecurity.com/2024/06/alleged-boss-of-scattered-spider-hacking-group-arrested/ #NoahMichaelUrban #ScatteredSpider #NeerDoWellNews #TylerBuchanan #VXUnderground #DataBreaches #SIMSwapping #MurciaToday #SIMswapping #WebFraud20 #Mailchimp #DoorDash #lastpass #0ktapus #Caesars #GroupIB #KingBob #signal #TheCom #Okta #Sosa #fbi #MGM

UNC3944 aka ‘Scattered Spider’ Shifts Focus to Data Theft from SaaS Applications https://thecyberexpress.com/unc3944-shifts-focus-to-data-theft-from-saas/ #ThreatIntelligenceNews #TheCyberExpressNews #SoftwareasaService #CybersecurityNews #SaaSApplications #AttackLifecycle #ScatteredSpider #TheCyberExpress #FirewallDaily #ThreatActors #HackerNews #Ransomware #DataTheft #Mandiant #UNC3944 #SaaS