UNC3661

A financially motivated, English-speaking intrusion cluster associated with LAPSUS$ and later Microsoft tracking as Strawberry Tempest. It relies heavily on social engineering, credential theft, SIM swapping, help-desk manipulation, data theft, extortion, and occasionally destructive actions.