Meet Lapsus$: An Unusual Group in the Cyber Extortion Business

The report profiles Lapsus$, an active cyber extortion group since late 2021 that has targeted high-profile organizations (including NVIDIA and Samsung) by gaining access through RDP, phishing, purchased access, or recruited insiders and publicly leaking exfiltrated data via Telegram rather than traditional leak sites; it notes no evidence of deployed ransomware and recommends mitigations such as MFA, securing VPN/RDP, employee security training, and monitoring for insider threats.