ZeroFox Intelligence Flash Report - Scattered Lapsus$ Hunters Announce Return

## ZeroFox Intelligence Flash Report - Scattered Lapsus$ Hunters Announce Return

Product Serial: F-2025-11-27a

TLP:CLEAR

In this Flash report, ZeroFox researchers report on the recent announcement by the prominent threat collective Scattered Lapsus$ Hunters (SLSH) of their return, via a new Telegram channel.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• On November 24, 2025, ZeroFox observed that the threat collective "Scattered Lapsus$ Hunters" (SLSH) had seemingly resumed activity through a new Telegram channel after nearly a month of silence.
• Multiple posts on the Telegram channel suggest that SLSH is offering financial incentives and actively recruiting insiders who can provide initial access to corporate networks.
• Recent messages on the channel likely indicate an escalation of border threats of disruption compared to previous publications.
• SLSH’s recent activity on Telegram almost certainly indicates clear intent to continue and likely escalate its previously observed operations, such as conducting data breaches and data leaks, publicly exposing corporations, and actively recruiting insiders.