Lapsus$: when kiddies play in the big league

**Executive summary:** This report profiles Lapsus$ as a financially-motivated extortion group that has successfully targeted multiple high-profile organizations (Samsung, Nvidia, Vodafone, Okta, EA), describing their history, recruitment and insider-use tactics, Telegram-based leak strategy, notable OpSec failures and IOCs (a Monero wallet used for ransoms and an IP/C2 hosting Metasploit on default port 3790), and listing their core TTPs including phishing, exploitation of public-facing applications, use of valid accounts and automated exfiltration.