• SLH Offers $500-$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks The notorious cybercrime collective known asScattered LAPSUS$ Hunters(SLH) has been observed offering financial incentives to recruit women to pull off social engineering attacks • The idea is to hire them for voice phishing campaigns targeting IT help desks, Dataminr said in a new threat brief • The group is said to be offering anywhere between $500 and $1,000 upfront per call, in addition to providing them with the necessary pre-written scripts to carry out the attack • “SLH is diversifying its social engineering pool by specifically recruiting women to conduct vishing attacks, likely to increase the success rate of help desk impersonation,” the threat intelligence firmsaid • Ahigh-profile cybercrime supergroupcomprising LAPSUS$, Scattered Spider, and ShinyHunters, SLH has a record of engaging in advanced social engineering attacks to sidestep multi-factor authentication (MFA) through techniques likeMFA prompt bombingand SIM swapping • The group’s modus operandi also involves targeting help desks and call centers to breach companies by posing as employees and convincing them to reset a password or instal

Article Summaries:

  • The notorious cybercrime collective known as Scattered LAPSUS$ Hunters (SLH) has been observed offering financial incentives to recruit women to pull off social engineering attacks. The idea is to hire them for voice phishing campaigns targeting IT help desks, Dataminr said in a new threat brief. The group is said to be offering anywhere between $500 and $1,000 upfront per call, in addition to providing them with the necessary pre-written scripts to carry out the attack. “SLH is diversifying its social engineering pool by specifically recruiting women to conduct vishing attacks, likely to incr

Sources: