Show Notes
Cybercrime groups are no longer operating independently – they’re forming cartels.
Scattered Lapsus$ Hunters, a blend of Scattered Spider, Lapsus$, and ShinyHunters, just bolstered their ranks with the Crimson Collective, the crew behind the recent Red Hat Consulting breach.
And they’re not alone. LockBit, DragonForce, and Qilin have announced their own alliance, setting the stage for a turf war in the cybercrime space.
Join us for this episode of State of Cybercrime where Matt and David cover the hit lists of these new coalitions, plus the recent Oracle vulns and the F5 breach that’s being called the next SolarWinds.
More from State of Cybercrime
ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.
If your company runs PTC Windchill, Cl0p may already have your blueprints.
A complete attack chain run by an AI agent – with zero human hands on the keyboard.
The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.