Flare says Scattered Spider, LAPSUS$ and ShinyHunters are separate clusters
Shared branding does not prove one gang; Flare treats original LAPSUS$ as defunct after September 2022.
48
Threat actor
SP1D3R HUNTERS
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 21, 2026
- Last mentioned4d ago
Timeline
1 articles · newest firstAppears with
- CISAorganization · 1
- UNC6240threat actor · 1
- UNC6040threat actor · 1
- Googleorganization · 1
- Microsoftorganization · 1
- Octo Tempestthreat actor · 1
- Flareorganization · 1
- ShinyHuntersthreat actor · 1
- DragonForcemalware · 1
- LAPSUS$threat actor · 1
- Scattered Spiderthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.