What other aliases and vendor names is Scattered Lapsus Hunters known by?

Scattered Lapsus Hunters is tracked across the cybersecurity industry by multiple aliases, including: 0ktapus, Bling Libra, DEV-0971, G1015, G1057, Gnostic Players, LUCR-3, Muddled Libra.

What are the primary motivations and sponsors of Scattered Lapsus Hunters?

Scattered Lapsus Hunters operates from Unknown with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

What vulnerabilities and CVEs does Scattered Lapsus Hunters actively exploit?

Scattered Lapsus Hunters has been observed weaponizing vulnerabilities including CVE-2026-35273.

Scattered Lapsus Hunters

▲ High Threat

Primary Aliases: DEV-0971 Octo Tempest Scattered Spider UNC3944

Sponsor / State Affiliation Independent / Not Attributed

Primary Motivation Espionage / Financial

Active Timeline Unknown – Present

Confidence Rating 70% (Grounded)

Launched in August 2025, the Scattered LAPSUS$ Hunters collective has rapidly established itself as one of the most formidable threats on today’s cybercriminal landscape. This alliance brings together three of the most notorious English-speaking cybercriminal groups: Scattered Spider, LAPSUS$ and ShinyHunters. In just a few months, this organization has multiplied spectacular attacks against leading companies, stealing billions of pieces of data and perfecting the art of digital extortion.