Author/Source: Brian Krebs See the full link here
Takeaway
This article discusses a data extortion gang called Scattered Lapsus ShinyHunters (SLSH) that harasses victims and their families to force payment. A security expert advises against paying them because the group is unreliable and negotiating only encourages more harassment.
Technical Subject Understandability
Intermediate
Analogy/Comparison
Dealing with SLSH is like trying to reason with a group of bullies on a playground; engaging them often makes the situation worse, and they rarely keep their promises.
Why It Matters
This topic is important because SLSH uses extreme tactics like threatening physical violence and swatting to extort companies and individuals, creating significant trauma. For example, executives at targeted organizations have faced phony bomb threats at their homes.
Related Terms
Data ransom, Swatting, DDoS attacks, Phishing, MFA, SSO credentials, Telegram channels, Dark web shaming blog, Sextortion.
Jargon Conversion
Data ransom: When criminals demand money to give back stolen information. Swatting: When someone fakes an emergency call to send heavily armed police to a person’s home or work. DDoS attacks: When a website is flooded with too much internet traffic to make it crash. Phishing: Tricking people, often through fake messages, to get their private information. MFA: An extra security step, like needing a code from your phone, to prove it’s you logging in. SSO credentials: A single username and password that lets you access multiple services. Telegram channels: Group chats on the Telegram app used by criminals to communicate and harass. Dark web shaming blog: A secret website where criminals post stolen data to embarrass victims. Sextortion: Threatening to share embarrassing private information or images unless demands are met.


Leave a comment