Brutkey

Kevin Beaumont
@GossiTheDog@cyberplace.social

It has strong rings of former LAPSUS$ activity due to a range of things, including many of the same victim orgs, screenshots from historic incidents 2021-2022 which weren’t public, targeting Portuguese speaking orgs again, staying up to 4am, the lingo, UK links etc.

They also appear to targeting UK justice system network, goading the NCA and going after more retailers.