Academic publisher Elsevier hit by LAPSUS$ redirect attack
Elsevier says a short-lived LAPSUS$ compromise redirected some visitors to a criminal leak page.
Elsevier confirmed that on September 21 visitors to some of its platforms were redirected to a LAPSUS$ leak page. The Amsterdam-based publisher said the compromise was narrowly scoped and brief, and that core platforms, customer data, research content, and operational systems were not compromised. Students reported the redirect on September 22 while trying to reach journals and textbooks. Elsevier operates ScienceDirect, ClinicalKey, and LeapSpace; it did not name the affected properties.
- Redirect discovered September 21 and quickly removed
- Users were sent to a LAPSUS$ leak page
- Elsevier says no customer data or core systems were compromised
- Affected web properties and duration were not named
- Threat actors
- LAPSUS$Scattered SpiderShinyHunters
- Victims
- Elsevier
- Organizations
- Elsevier
- Countries
- Netherlands
From the original article
2 min read at theregister.comCustomers got crime crew's calling card instead of access to journals
By Connor Jones · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.