Author/Source: Brian Krebs See the full link here
Takeaway
This article warns about a data ransom gang called Scattered Lapsus ShinyHunters (SLSH) that uses aggressive tactics like harassing executives and their families. It advises against paying or negotiating with them, as they are unreliable and often increase harassment.
Technical Subject Understandability
Intermediate
Analogy/Comparison
Dealing with Scattered Lapsus ShinyHunters is like trying to negotiate with a group of unruly children who throw a bigger tantrum if you engage with them, even if you promise them something.
Why It Matters
This group’s tactics, which include physical threats and swatting, show how cybercrime can escalate beyond data theft to directly endanger people’s safety. Not paying them is crucial because it reduces incentives for these extreme behaviors.
Related Terms
Swatting, MFA, SSO, DDoS attacks, credential harvesting sites
Jargon Conversion
Swatting is when criminals make a fake emergency call to send armed police to someone’s home. MFA (Multi-Factor Authentication) is an extra security step, like a code from your phone, to prove it’s you. SSO (Single Sign-On) lets you use one login for many apps. DDoS attacks are when many computers flood a website to make it crash. Credential harvesting sites are fake websites designed to steal your login information.


Leave a comment