Unveiling the Tactics of Lapsus$: A Review of Internal Attacks Vectors, Mobile Device Exploitation, and Social Engineering Techniques

On August 10, 2023, the U.S. Department of Homeland Security (DHS) released the Cyber Safety Review Board (CSRB) report summarizing the findings of its review into the activities of threat actor group Lapsus$, who, beginning in late 2021 and continuing into late 2022, attempted to extort dozens of well-known global companies and government agencies. Lapsus$ exploited corporate networks, stole source code, demanded extortion payments, and defaced websites with political messages; most thought this was the work of a nation-state …

actor attacks august board csrb cyber cyber safety cyber safety review board department department of homeland security device dhs engineering exploitation findings homeland security internal mobile mobile device report review safety security social social engineering tactics techniques threat threat actor u.s. department of homeland security