logo

Red Hat Hackers Team Up With Scattered Lapsus$ Hunters

ID: e0514238-8719-544e-bee5-75dab9e25028

STIX ID: report--e0514238-8719-544e-bee5-75dab9e25028

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-10-08

Date Updated: 2026-05-05

Author: Rob Wright

...
...

The report details a breach of Red Hat Consulting's self-hosted GitLab allegedly conducted by a newcomer called Crimson Collective, which claims to have stolen thousands of repositories and customer engagement reports and is leveraging Scattered Lapsus$ Hunters' leak site to demand ransom; researchers also observed Crimson Collective using leaked long-term AWS credentials (discovered with TruffleHog), creating privileged accounts, and exfiltrating data via API calls in extortion campaigns.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.