Recently threat actors from the Lapsus$ ransomware organization announced that they will pay employees and individuals with insider knowledge of major technology companies to allow for VPN or Citrix credentials to breach the network, offering a significant payment for their risk. Lapsus$ threat actors recently leaked stolen code signing certificates for NVIDIA, allowing for the silent bypass of security systems within Windows devices. From this recently sent communication by Lapsus$ on Telegram, it’s clear that their next set of targets will be within telecommunications companies, major gaming corporations, call centers, and server hosting providers. With insider access, a single compromise can cripple an entire company by varying tactics including ransomware, extortion, espionage, credential leaks, and any other attack vector that the threat group is looking for. CTIX urges analysts of the following companies to be on high alert for any suspicious activity on their networks in the coming weeks; Specifically, companies such as Claro, Telefonica, AT&T, Microsoft, Apple, EA Games, IBM, Atento, Teleperformance, OVH, Locaweb, and similar entities.