89
Sophistication
2009
First Seen
92
Notoriety
73
Stealth
85
Immersive Rating
81
Impact
87
Tactics Variety

Lapsus$

Also known as Strawberry Tempest, a globally organized cyber-extortion gang composed largely of teenage actors. Known for chaotic, high-profile breaches of major technology, telecom, and gaming companies. Focuses on disruption and publicity rather than traditional ransomware.

Key behaviours to watch:

  • SIM swapping, MFA fatigue, and bribery of insiders for initial access.

  • Theft and leak of source code, internal tools, and sensitive customer data.

  • Minimal operational security; fast and noisy intrusions with real-time Telegram updates.

Immersive coverage includes:

IT Army of Ukraine
75
2013
68
72
88
65
70
Kamacite
88
2013
86
83
85
81
86
Kimusky
62
2021
88
43
86
78
66
Lapsus$
89
2009
92
73
85
81
87
Lazarus Group
95
2008
85
92
93
94
88
LulzSec
50
2011
75
38
62
72
52
MAGNALLIUM
80
2013
56
73
79
58
74
Onyx Sleet
85
2014
80
80
84
71
77