A coalition of cybercrime groups including Scattered Spider, LAPSUS$, and ShinyHunters is actively operating through multiple Telegram channels despite continuous disruptions. These groups engage in data extortion, social engineering, and potential ransomware activities, working under a loose federation known as “The Com.” #ScatteredSpider #LAPSUS$ #ShinyHunters #TheCom
Keypoints
- The cybercrime groups frequently recreate their Telegram channels to evade moderation and maintain visibility.
- They conduct data extortion, including offering extortion-as-a-service and pressuring targets through social engineering campaigns.
- The groups coordinate under a flexible network called “The Com,” sharing brand identity and operational tactics.
- Threat actors use theatrical branding and layered identities to project legitimacy and manipulate perception.
- Emerging ransomware threats like ShinySp1d3r indicate potential future operations, combining social engineering with malware deployment.
Read More: https://thehackernews.com/2025/11/a-cybercrime-merger-like-no-other.html