Skip to content
CybercrimeFinancialAdvanced sophistication · Organised crime network

SLSH

SLSH is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 5 sectors, including Government and Finance, in Israel and Jordan. It uses 6 MITRE ATT&CK techniques.

Also known as
  • Scattered Lapsus$ Hunterss
  • SLH
  • SP1D3R HUNTERS
  • Trinity of Chaos
Techniques
6
Exploited CVEs
No CVE data
Last seen
Jan 31, 2026
Record updated

Who They Target.

About SLSH.

Scattered LAPSUS$ Hunters (SLSH) is a Cybercrime Syndicate group primarily motivated by financial-gain. The group mainly targets enterprise organizations across multiple sectors including technology, retail, automotive, and healthcare companies with Salesforce and SSO implementations, and is assessed to operate with advanced sophistication. It is commonly associated with voice phishing campaigns using AI-generated voices, OAuth token abuse, live phishing panels, data exfiltration via SOQL queries, and extortion-as-a-service operations and is known for operating as a decentralized federated alliance combining TTPs from Scattered Spider, LAPSUS$, and ShinyHunters with multi-stage attacks involving initial access, data theft, extortion, and ransomware deployment.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.