KINWILDER

LAPSUS

LAPSUS public emblem
The archive labels this the 2024 LAPSUS$ logo. This is a dated public reference, not confirmation of present-day adoption or publisher identity. Brand source · CC0-1.0 (source-reported) · JohnHartTech / Wikimedia Commons file record

reference profile · reported nexus: Unknown (not nationality)

An actor group conducting large-scale social engineering and extortion campaign against multiple organizations with some seeing evidence of destructive elements.

Source-reported aliases: LAPSUS$, DEV-0537, SLIPPY SPIDER, Strawberry Tempest, UNC3661, Lapsus. Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): No country-level metadata

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/

https://blog.checkpoint.com/2022/03/07/lapsus-ransomware-gang-uses-stolen-source-code-to-disguise-malware-files-as-trustworthy-check-point-customers-remain-protected/

https://www.crowdstrike.com/adversaries/slippy-spider/

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost