Scattered Lapsus ShinyHunters: Unruly Extortion Gang's Harassment Playbook and Why Paying is a Losing Move
A prolific data ransom gang calling itself Scattered Lapsus ShinyHunters (SLSH) employs a distinctive and aggressive extortion playbook. Unlike traditional, regimented ransomware groups, SLSH is an unruly, fluid English-language gang that focuses on harassing, threatening, and even swatting executives and their families. They simultaneously notify journalists and regulators about the intrusions to increase pressure. Some victims are reportedly paying, potentially to contain the stolen data as much as to stop the personal attacks. However, a top expert on the group warns that any engagement beyond a firm "We're not paying" response only encourages further harassment. According to Allison Nixon, director of research at security consultancy Unit 221B, SLSH's fractious and unreliable history means victims cannot trust them to keep their word, such as destroying stolen data upon payment. The group's lack of interest in building a consistent reputation makes the only winning move for victims to refuse payment entirely.