Lapsus$
| Active
None
Victims
14
First Discovered
2021-12-10
victim
Last Discovered
2026-03-01
victim
Inactive Since
16
days
Avg Delay
N/A
attack→claim
Infostealer
N/A
victims with domain
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Origin DNS error | lapsus.cz | Cloudflare | No | 2026-03-17 19:30:50 | lapsus.cz |
Target (Available)
Top 5 Activity Sectors
- Education 2
- Consumer Services 2
- Government Facilities 1
- Communication 1
- IT Manufacturing 1
Top 5 Countries
-
France
5
-
United States
2
-
Brazil
1
-
Portugal
1
-
Japan
1
Heatmap (Available)
Ransom Notes (0)
No ransom notes available.
Tools Used (Available)
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
ADExplorer
|
AnyDesk
|
Mimikatz
|
NTDS Utility (ntdsutil)
|
Vulnerabilities Exploited (0)
No vulnerabilities exploited available.
TTPs Matrix (0)
No TTPs available.
Negotiation Chats (0)
No negotiation chats available.
YARA Rules (0)
No YARA rules available.
Indicators of Compromise (IoCs) (1)
Victims (14)
[AI generated] Salesfloor is a software company that provides a mobile platform designed to connect …
[AI generated] Lille University, also known as University of Lille, is a well-recognized public univ…
[AI generated] The FR Ministry of Agriculture, or the French Ministry of Agriculture, is a governmen…
[AI generated] Eni Energy is an Italian multinational oil and gas company headquartered in Rome. Fou…