Threat IntelHIGH

Vishing Attacks: Scattered LAPSUS$ Hunters Recruit Women for Cash

THThe Hacker NewsFeb 25, 2026
Scattered LAPSUS$ Huntersvishingsocial engineeringcybercrime
🎯

Basically, a cybercrime group is paying women to trick IT help desks over the phone.

Quick Summary

Scattered LAPSUS$ Hunters are recruiting women for voice phishing attacks, offering $500-$1,000 per call. This poses a serious risk to your personal and professional data. Stay vigilant and report any suspicious calls to protect yourself.

What Happened

Cybercrime? is evolving, and the latest twist involves a notorious group called Scattered LAPSUS$ Hunters (SLH). This collective has been spotted recruiting women to conduct voice phishing, or vishing?, attacks. These attacks specifically target IT help desk?s, aiming to exploit vulnerabilities in organizations' security systems.

The group is reportedly offering between $500 and $1,000 for each successful call. This financial incentive is designed to lure individuals into participating in these deceptive schemes. As organizations increasingly rely on remote work and digital communication, the risk of falling victim to such attacks rises dramatically.

Why Should You Care

If you use a phone to manage your work or personal accounts, this news is crucial. Imagine receiving a call from someone who sounds legitimate, asking for sensitive information. That's exactly what these vishing? attacks aim to achieve. They can lead to unauthorized access to your accounts and sensitive data.

This isn't just a problem for big companies; it can affect anyone. Your personal information, bank accounts, and even your job could be at risk. Protecting yourself means being aware of these tactics and knowing how to respond if you receive a suspicious call.

What's Being Done

In response to this alarming trend, cybersecurity experts and organizations are on high alert. They are working to develop better training and awareness programs to help employees recognize and avoid vishing? attempts. Here’s what you can do right now:

  • Be cautious when receiving calls asking for sensitive information.
  • Verify the identity of the caller before providing any details.
  • Report suspicious calls to your IT department or local authorities.

Experts are closely monitoring the situation, especially how SLH's tactics evolve and whether other groups will adopt similar recruitment strategies. Staying informed is key to staying safe.

💡 Tap dotted terms for explanations

🔒 Pro insight: The recruitment strategy reflects a shift in social engineering tactics, leveraging personal connections to enhance trust and deception.

Original article from

The Hacker News

Read Full Article

Related Pings

HIGHThreat Intel

Alignment: The Key to Cybersecurity Success

Organizations are prioritizing alignment in cybersecurity to enhance their defenses. This affects everyone, as misalignment can leave your data exposed. Companies are now investing in training and collaboration to strengthen their security posture. Stay informed about how these changes impact your safety online.

Anthropic Research·Today, 3:38 AM
HIGHThreat Intel

FBI Probes Suspicious Cyber Activity on Surveillance Systems

The FBI is looking into suspicious cyber activity affecting sensitive surveillance systems. This could impact privacy and data security. Stay informed and review your own security practices.

SecurityWeek·Today, 1:01 AM
MEDIUMThreat Intel

AI-Powered Cyber Defense: Trump's New Strategy Unveiled

The Trump administration has announced a new cybersecurity strategy focusing on AI for defense. While promising, it lacks crucial details. This could affect your online security, so stay informed about developments.

Cybersecurity Dive·Yesterday, 10:36 PM
HIGHThreat Intel

Iran's MuddyWater Breaches Multiple U.S. Organizations

Iran's MuddyWater hacking group has breached multiple U.S. organizations, raising significant security alarms. These attacks could compromise sensitive information and disrupt essential services. The FBI is investigating, and Cisco has issued critical patches to address vulnerabilities.

CyberWire Daily·Yesterday, 9:30 PM
HIGHThreat Intel

MuddyWater APT Hits U.S. Organizations with Dindoor Malware

MuddyWater, an Iranian hacker group, is targeting U.S. organizations with new Dindoor malware. Banks, airports, and nonprofits are at risk of data breaches and disruptions. Cybersecurity teams are responding with updates and monitoring measures to protect sensitive information.

Security Affairs·Yesterday, 8:05 PM
HIGHThreat Intel

North Korean Threat Groups Exploit AI for Fake Worker Schemes

North Korean hackers are using AI to create fake job applicants. This tactic poses serious risks to companies and their sensitive data. Microsoft warns organizations to enhance their recruitment processes to combat this growing threat.

CyberScoop·Yesterday, 7:16 PM