The Cybercriminal Gang Scattered Lapsus$ Hunters Claims to Go Dark Amidst Alleged Data Access Incidents

==========================================================

Google Confirms Fraudulent Account Creation in Law Enforcement System -------------------------------------------------------------

Google recently disclosed that malicious actors created a fake account within its Law Enforcement Request System (LERS), a portal used by police and government agencies to request user data. A Google spokesperson stated, "We have identified that a fraudulent account was created in our system for law enforcement requests and have disabled the account. No requests were made with this fraudulent account, and no data was accessed."

The incident aligns with posts made on BreachForums by the group known as Scattered Lapsus$ Hunters, which purportedly comprises members from notorious cybercrime crews including Scattered Spider, ShinyHunters, and Lapsus$. The hackers claimed to have accessed Google’s LERS and the FBI’s National Instant Criminal Background Check System (NICS), a federal database used to vet individuals seeking to purchase firearms. The FBI has not officially commented on these claims.

Cybercrime Groups’ Retaliation and Public Taunts ---------------------------------------------

Following their alleged access, the fragmented gangs have shown a penchant for publicity and taunting law enforcement and security firms like Mandiant. Recently, they announced their retirement from cybercriminal activities, posting on Breachforums that they wished to "go dark" and expressed disdain for authorities, claiming that eight members of similar groups arrested since April 2024 were "collateral victims" in their "war on power."

In their farewell message, they boasted about enjoying their "golden parachutes" with millions accumulated from their illicit activities, stating, "If you worry about us, don't... we will enjoy our golden parachutes with the millions the group accumulated. Others will keep on studying and improving systems you use in your daily lives. In silence." They also shared images of Google's LERS and FBI's NICS portals marked with "Scattered Lapsus$ Hunters," suggesting ongoing access or illicit interest.

Industry Analysts Skeptical of True Disbandment -----------------------------------------

Security experts remain skeptical about the groups' announced retirement. Karl Sigler, Security Research Manager at Trustwave SpiderLabs, told The Register, "Rather than a true disbanding, this announcement likely signals a strategic move to distance the group from increasing law enforcement pressure." He added, "It's plausible that something within the group's operational infrastructure has been compromised, such as a breached system or communication channel. Groups like Scattered Spider don't disappear. They adapt."

The continued activity and threats from these groups underscore the persistent challenges faced by cybersecurity and law enforcement agencies in combating organized cybercrime.