Scattered Lapsus Hunters

PAY OR LEAK

[ShinyHunters @shinyhuntersss]

New DLS DESIGN #Shinyhunters #darkweb #fvckFbi

[Team D4rkn3ttz @Team_D4rkn3ttz]

🚨 ShinyHunters / SLSH: New Activity Observed — reported by #Team_D4rkn3ttz @jzzzz1qw

SLSH has publicly disavowed Aegis/Reyswap, claiming he is not affiliated with ShinyHunters or SLSH and accusing him of using the ShinyHunters name in a scam.

SLSH describes itself as an alliance comprising ShinyHunters, Scattered Spider, Lapsus$, and UNC6783.

The SLSH name was previously used by an alliance comprising ShinyHunters, Scattered Spider, and Lapsus$ that was active in 2025.

The SLSH-branded operation is promoting IntelForums and has announced plans to redesign its DLS.

The site features a claim of a breach targeting the Florida DMV on October 10, 2026. Posted filenames appear consistent with naming conventions previously observed in ShinyHunters DLS listings.

SLSH also claims to have seized control of an existing ShinyHunters account with approximately 13K followers. Since then, the account has been observed in a mutual-follow relationship with SLSH’s account and is being used to promote the SLSH identity.

#CTI #ThreatIntelligence #Cybercrime #DarkWeb

[ShinyHunters @shinyhuntersss]

Patched forums Link https://t.co/7Oiudskc03
@TrinityOfChaoss #shinyhunters

[Scattered Lapsus Hunters @TrinityOfChaoss]

New telegram Link
#Scatteredspider #lapsus #shinyhunters
https://t.co/ywmoCTqQuP

[Scattered Lapsus Hunters @TrinityOfChaoss]

Our Telegram Channel has been Banned #scatteredspider #lapsus #ShinyHunters

[ShinyHunters @shinyhuntersss]

Account seized by @TrinityOfChaoss for #Shinyhunters

[VECERT Analyzer @VECERTRadar]

⚠️ 🌐 🕵️‍♂️ 🗄️ PREVENTION ALERT - NEW CLANDESTINE CYBERCRIME FORUM (INTELFORUMS)

[STATUS: ALLEGED / ACTIVE / PLATFORM DETECTED: INTELFORUMS / DATE: NOVEMBER 10, 2026]

Centralized cyber-intelligence systems have intercepted the registration and launch of a new exchange platform within the underground economy (registered on November 10, 2026). The clandestine portal, identified as IntelForums (intelforums(.)cc), has begun operating as a meeting point and discussion forum for individuals involved in the trade of data and breach-related intelligence.

The forum’s user interface, navigation sections (Forums, Archive, Resources, Upgrades, Shoutbox, Online), and active user profiles���operating under aliases linked to the coordination of massive data leaks—have been identified.

#IntelForums #CyberCrime #UndergroundForum #DataLeak #DataBreach #BreachAlert #DarkWeb #Hacking #ThreatIntel #ThreatIntelligence #InfoSec #CyberAlert #VECERT #SOC #CSIRT #Unconfirmed #SecurityAlert #CyberDefense #CyberRisk

[Clandestine @akaclandestine]

https://t.co/MrcjDnxnc1

[mRr3b00t @UK_Daniel_Card]

Morning v2 or should I say v8 😉❤️🇬🇧��🛡️

[Scattered Lapsus Hunters @TrinityOfChaoss]

New Forums Account link: https://t.co/UtsGDGWi0d
#scatteredspider #lapsus #ShinyHunters

[Scattered Lapsus Hunters @TrinityOfChaoss]

@skocherhan 🫶

[Scattered Lapsus Hunters @TrinityOfChaoss]

The latest message regarding the #Fake #Hack of #Binance by a bogus #ShinyHunters group
https://t.co/yBcnKqwRw1

[Scattered Lapsus Hunters @TrinityOfChaoss]

@skocherhan Aegis is really joke

[Scattered Lapsus Hunters @TrinityOfChaoss]

Exactly is fake and is not shinyhunters is not rey is not cybercriminal just skid bahahah

[CZ 🔶 BNB @cz_binance]

This is obviously fake/scam. Anyone who has private keys won't "sell the data", they will move the funds. Saw it yesterday, thought it was obvious, but still many media went with it for the headlines.

[CZ 🔶 BNB @cz_binance]

This is obviously fake/scam. Anyone who has private keys won't "sell the data", they will move the funds. Saw it yesterday, thought it was obvious, but still many media went with it for the headlines.

[Scattered Lapsus Hunters @TrinityOfChaoss]

@andrewc44104127 @grok No bro its fake group for fake attack

[crypto.news @cryptodotnews]

UPDATE: Binance dismisses ShinyHunters’ alleged 335M-user data breach as a likely scam

A Binance spokesperson has told https://t.co/wdIuaMxgOm that the exchange's preliminary investigation found no evidence of compromised systems or customer data, questioning claims that the dataset contains passwords, KYC documents and private keys; Binance suspects the information may come from infostealer malware targeting individual devices.

[Scattered Lapsus Hunters @TrinityOfChaoss]

Reyswap explain of the world your scam with our name...

[Coin Bureau @coinbureau]

⚡️UPDATE: Binance says a $900,000 listing claiming to offer 335.9 MILLION user records is likely a SCAM.

The listing, attributed to ShinyHunters, claims to include readable passwords and external wallet keys.

Binance says it stores neither and has found NO evidence its systems, customer IDs, logins or wallet keys were compromised.

The probe continues. Binance says similar listings have used data stolen from users’ devices by malware.

[Scattered Lapsus Hunters @TrinityOfChaoss]

The truth always comes to light, Reyswap; your fake sales are going to be your undoing, kid.

[TuanX 🔶 @TuanNguyen_6789]

.@binance has responded to ShinyHunters’ alleged 335M-user data breach, calling it a likely scam.

A group calling itself ShinyHunters claims to be selling 335,900,000 lines of data allegedly linked to Binance!

They claim the dataset includes KYC documents, passwords, transaction histories, and even wallet private keys.

Several versions of the listing have surfaced, asking between $500,000 and $900,000.

They even gave Binance an ultimatum: “PAY OR LEAK.”

If they really had access to private keys controlling significant amounts of crypto, why would they sell everything for just $900,000? 🤔