Hosts Discuss SLH’s Reported Threats Against Google

Summary

Hosts discuss claims that SLH demanded Google fire two employees and stop investigating its network, threatening to leak a database. They note the group pairing is unconfirmed and Google has made no public statement.

Key points

The hosts say SLH demanded that Google fire two employees and that Google Threat Intelligence Group stop investigating its network, threatening to leak a database if Google refused.
The hosts identify Charles Carmichael and threat analyst Austin Larson as the employees named in the reported demand; they connect Larson to a deep-dive report on the group following the Salesloft breach.
The speakers say it is unclear which group posted the message and describe the alleged pairing of groups as only a claim, possibly a ruse.
The hosts report that Google had not made a public statement about the demands at the time of the discussion.

Article Details

Topics: [00:55] SLH’s reported demands to Google and threat to leak a database
[02:54] Employees named in the reported demands and the report following the Salesloft breach
[03:42] Uncertainty over which group posted the message and whether groups are cooperating
[05:52] Discussion of the report’s possible significance and what Google might do next

People

Austin LarsonThreat analyst and author of a deep-dive report on the group following the Salesloft breach; the hosts say SLH demanded he be fired.Charles CarmichaelOne of two Google employees the hosts say SLH demanded be fired; the hosts associate him with Mandiant.

Threat Actors

Scattered Lapsus$ HuntersThe hosts attribute demands to SLH to fire two Google employees and end Google’s investigations, along with a threat to leak a database. They say it is unclear which group posted the message; the alleged pairing with another group is described as only a claim.

Vendors

Google[00:58] have demanded that two Google employees