Threat Brief: Lapsus$ Group
Tags
country: Brazil Japan Portugal
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID bd8a9398-296f-4712-a46c-05cbee862a27
Fingerprint b0a402559e25c6cd
Analysis status DONE
Considered CTI value 1
Text language
Published March 24, 2022, 7:15 p.m.
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Sept. 5, 2024, 1:43 a.m.
Headline Threat Brief: Lapsus$ Group
Title Threat Brief: Lapsus$ Group
Detected Hints/Tags/Attributes 71/2/3
Source URLs
Redirection Url
Details Source https://unit42.paloaltonetworks.com/lapsus-group/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
Attributes
Details Type #Events CTI Value
Details Domain 24 
ctemplar.com
Details Email 1 
saudegroup@ctemplar.com
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 20 
DEV-0537