Scattered Lapsus$ Hunters Announces Departure from Hacking Scene

In a recent and somewhat perplexing message shared on a URL tied to a well-known hacking forum, the hacking collective known as Scattered Lapsus$ Hunters declared its retirement. The announcement comes at a time when the group’s activities have drawn significant attention.

A Chaotic Period

A spokesperson for the group commented on the whirlwind of activities they’ve engaged in. “As you know, the last weeks have been hectic,” they stated, alluding to their strategic distractions and the chaos they created. The group took credit for various high-profile cyber operations, such as paralyzing Jaguar factories, orchestrating multiple hacks against Google, and breaching the defenses of tech giants like Salesforce and CrowdStrike.

This statement hints at a shift in their strategy. The spokesperson mentioned how their approach has “evolved,” causing uncertainty about whether their recent incursions involved actual data compromises. This left various victims questioning the integrity of their data.

Potential Implications for Major Corporations

The spokesperson raised alarming questions regarding the security of several major corporations, including Kering, Air France, American Airlines, and British Airways. With many of these companies still awaiting ransom demands, the spokesperson’s remarks suggested that their sensitive information might still be at risk.

“Are their data currently being exploited, whilst US, UK, AU, and French authorities fill themselves with the illusions they have gotten the situation under control?” the spokesperson probed, emphasizing the precariousness of cyber security in today’s digital landscape.

The mention of Kering—a conglomerate that owns luxury brands such as Gucci, Balenciaga, and Alexander McQueen—was particularly notable. Reports indicate that Kering was recently victimized by an attack linked to ShinyHunters, another notorious hacking group, in early 2024. As the spokesperson questioned, the timeline of Kering’s discovery of this breach remains unclear, as does the extent of the customer impact.

The Future of Involved Hackers

The farewell note from Scattered Lapsus$ Hunters, if genuine, contains a significant caveat regarding the future of its members. The group noted that their names may surface in connection with forthcoming data breach disclosures, but this does not imply that they remain active participants in such activities.

Additionally, the spokesperson addressed the recent apprehension of several hackers allegedly tied to the group. “We want to share a thought for the eight people that have been raided or arrested in relation to these campaigns,” they expressed, underscoring the broader implications of these arrests.

Expressions of Regret and Responsibility

The group extended condolences to the families of those arrested, framing them as collateral damage in the ongoing cyber warfare. “Those carefully selected targets are the last collateral victims of our war on power,” the spokesperson remarked, alluding to the sacrifices made in the pursuit of their goals.

Interestingly, they suggested that those arrested would not face serious repercussions, portraying them as scapegoats for the group’s exercised and calculated endeavors. This sentiment raises questions about the accountability in the hacking world and the lengths to which groups will go to protect their own.

Going Dark: A Final Lesson

In closing, the spokesperson delivered what they termed the “last lesson” the group wishes to impart. They indicated a firm decision to relegate various associated names—like LAPSUS$, Trihash, Yurosh, and others—to obscurity. The message conveyed an ironic sense of pride in having learned from the best, hinting at the complexity of the hacking landscape and the strategies employed within it.

“Others will keep on studying and improving systems you use in your daily lives,” they declared, closing with an almost poetic farewell as they signaled the end of an era. Whether this is a sincere departure from hacking or merely a strategic retreat remains to be seen. For many observers in the cybersecurity field, the narrative continues to unfold, leaving us to ponder what comes next for all involved.