Lapsus$ Eyes SharePoint, VPNs, and VMs
A new report revealed the techniques and tactics of the highly unpredictable attacks by the Lapsus$ gang to target the victims, along with its interest in exploiting SharePoint, VPNs, and VMs. Researchers have observed mass deletion of VMs, storage, and configurations in cloud environments. For remediation, the report suggests various recommendations, including logging for cloud computing environments, using MFA, and restricting unwanted access to sensitive data.