CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

LAPSUS$

April 21, 2025

[LAPSUS$](https://attack.mitre.org/groups/G1004) is cyber criminal threat group that has been active since at least mid-2021. [LAPSUS$](https://attack.mitre.org/groups/G1004) specializes in large-scale social engineering and extortion operations, including destructive attacks without the use of ransomware. The group has targeted organizations globally, including in the government, manufacturing, higher education, energy, healthcare, technology, telecommunications, and media sectors.(Citation: BBC LAPSUS Apr 2022)(Citation: MSTIC DEV-0537 Mar 2022)(Citation: UNIT 42 LAPSUS Mar 2022)

Aliases: LAPSUS$, DEV-0537, Strawberry Tempest

MITRE ATT&CK ID: G1004

View on MITRE ATT&CK