The Low-Tech Tactics of LAPSUS$ Cybercrime Group

The recent breach by LAPSUS$, a relatively new cybercrime group, has raised concerns about the increasing threat of ransomware attacks. In this article, we'll take a closer look at the tactics used by LAPSUS$ to gain access to targeted organizations and how these methods can be prevented.

According to Microsoft, the LAPSUS$ group primarily uses 'social engineering' tactics to compromise target organizations. This involves bribing or tricking employees into revealing sensitive information, which is then used to gain unauthorized access to the organization's systems. The group has also been known to use publicly available information about a company's partners and suppliers to identify potential vulnerabilities.

Microsoft found instances where LAPSUS$ successfully gained access to target organizations through recruited employees or employees of their suppliers or business partners. This highlights the importance of educating employees on cybersecurity best practices and implementing robust security measures to prevent such breaches.

LAPSUS$ has also been known to use low-tech methods, such as publicly discussing their illicit activities on Telegram channels before attempting to steal sensitive information. This public disclosure can often lead to swift action by organizations to intervene and limit the impact of the breach.

In the case of Microsoft, the company was able to interrupt LAPSUS$'s source code download and prevent further damage after they publicly discussed their illegal activity on their Telegram channel. This highlights the importance of having robust security measures in place and being prepared to respond quickly to potential breaches.

The recent breaches involving LAPSUS$, which have affected major corporations such as NVIDIA, Samsung, and Vodafone, serve as a reminder of the importance of prioritizing cybersecurity and implementing effective measures to prevent such attacks. By staying informed about the tactics used by cybercriminals like LAPSUS$ and taking proactive steps to secure our systems, we can reduce the risk of falling victim to these types of attacks.

Krebs group ransomwhere