RANSOMWARE OPERATION💰 FINANCIAL
scattered lapsus$ hunters
1
aliases
Intelligence Profile
scattered lapsus$ hunters — tracked by MISP Galaxy (ransomware).
Threat Analysis
scattered lapsus$ hunters is a ransomware operation that deploys encryption-based extortion against organizations globally. This group maintains a data leak site (DLS) to pressure victims into paying ransom demands.
Financially motivated threat actors like scattered lapsus$ hunters prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Intelligence Reports Mentioning scattered lapsus$ hunters
SLH Offers $500–$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks
The Hacker News· Feb 25, 2026
External References
Quick Facts
TypeRansomware Operation
Motivation💰 financial
Aliases1
Also Known As
scattered lapsus$ hunters
DLS Infrastructure
○ OFFLINEshinypogk4jjniry5qi7247tznop6mxdrdte2k6pdu5cyo43vdzmrwid.onion
● ONLINEbreachforums.hn
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.