Brief hijack makes Elsevier domains redirect to LAPSUS$ “Chapter II” page

Reported by Help Net Security (Zeljka Zorz)

Summary by Cyber Security News22 Sep 2026, 15:46 CEST

About this summary. This is a short, independently written summary of an article first published by Help Net Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/09/22/elsevier-domains-hijack-lapsus/

Three domains / web portals belonging to Dutch academic publishing company Elsevier have been redirecting users to a page branded “LAPSUS$ GROUP, Chapter II,” carrying a signed statement that taunted the FBI and counted down to a future victim. According to Cloudskope researchers, the redirect ran for at least 78 minutes, from roughly 7:49pm CT until it was cleared before 10:09pm CT on September 21, 2026. Elsevier is yet to offer an explanation on how … More →

Read the full article at Help Net Security →