Lapsus$ targeting SharePoint, VPNs and virtual machines

Access to corporate VPNs is a primary focus for this group as it allows the threat actor to directly access key infrastructure which they require to complete their objectives.