LAPSUS$ campaigns (Campaign)

LAPSUS$ used large-scale social engineering to compromise user accounts, steal credentials, enumerate cloud APIs and abuse cross-account trust to exploit unpatched applications, escalate privileges, move laterally into cloud environments, exfiltrate sensitive data for extortion and delete compromised systems. The report highlights affected collaboration and code-hosting platforms (GitLab, GitHub, Jira, Confluence, SharePoint), provides a three-stage attack flow and references vendor and government advisories for detection and hardening.