LAPSUS$
DEV-0537Strawberry Tempest
UnattributedNo public state or group attribution on record
LAPSUS$ is cyber criminal threat group that has been active since at least mid-2021. LAPSUS$ specializes in large-scale social engineering and extortion operations, including destructive attacks without the use of ransomware. The group has targeted organizations globally, including in the government, manufacturing, higher education, energy, healthcare, technology, telecommunications, and media sectors.
MITRE ATT&CK Techniques
T1003.003T1003.006T1005T1068T1069.002T1078T1078.004T1087.002T1090T1098.003T1111T1114.003T1133T1136.003T1199T1204T1213.001T1213.002T1213.003T1213.005T1485T1489T1531T1552.008T1555.003T1555.005T1578.002T1578.003T1583.003T1584.002T1586.002T1588.001T1588.002T1589T1589.001T1589.002T1591.002T1591.004T1593.003T1597.002T1598.004T1621T1684.001
Associated Malware
Mimikatz
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.