Scattered Spider’s New Telegram Channel Names Targeted Organizations

A new Telegram channel that combined the names of well-known threat actor organizations Shiny Hunters, Scattered Spider, and Lapsus$ emerged on Friday afternoon in a daring uptick in cyberthreat activity.

This platform, potentially short-lived due to Telegram’s moderation policies, has rapidly disseminated evidence of multiple data breaches, partial data leaks, and extortion demands within its first 24 hours.

Unlike traditional leak channels that offer succinct breach announcements followed by data dumps or sales links, this channel intersperses partial disclosures with memes, commentary, and direct threats, creating a chaotic yet revealing narrative of ongoing cyber intrusions.

Rapid Emergence of Extortion Threats

The threat actors have leaked sensitive legal documents, including court filings from Qantas and the Legal Aid Agency injunctions against Shiny Hunters, a subpoena served on Google, and a mutual legal assistance request from France to Moldova, alongside Shiny Hunters’ responses to extortion-related communications.

Technical analysis of the posts ...