The Scattered LAPSUS$ Hunters (SLH) alliance, formed in early August 2025, represents a significant evolution in cybercrime as three prominent groups—Scattered Spider, ShinyHunters, and LAPSUS$—united. By leveraging Telegram channels as their operational base, SLH adopted a unique approach that merges attention-seeking hacktivism with financially motivated crime, utilizing sensationalist messaging and public engagements. Despite facing repeated platform disruptions, the group has shown extraordinary resilience, quickly reestablishing its visibility following takedowns.
The operational capabilities of SLH reveal a sophisticated understanding of exploit development, particularly in high-value systems such as CRM and SaaS platforms. Analysts have identified notable vulnerabilities associated with the group, including CVE-2025-61882 and CVE-2025-31324, illustrating their ability to harness and develop advanced technical skills. By employing AI-driven vishing campaigns and credential harvesting, SLH further enhances its operational impact. This merger has equipped them with the tools necessary for effective social engineering, exploitation, and extortion, significantly strengthening their position within the cybercriminal ecosystem.
👉 Pročitaj original: Cyber Security News
