"Lapsus$ emerged just a few months ago, at first focused almost exclusively on Portuguese-language targets. In December and January, the group hacked and attempted to extort Brazil’s health ministry, the Portuguese media giant Impresa, the South American telecoms Claro and Embratel, and Brazilian car rental company Localiza, among others. In some cases, Lapsus$ also mounted denial-of-service attacks against victims, making their sites and services unavailable for a period of time[0]."

[0] https://archive.ph/20220322060734/https://www.wired.com/stor...

the telegram channel name is related to a big hack activity in brazil last year, they always share brazilian news..

It's also a relatively easy, cheap and common opsec strategy to mask your geographic location by constantly sharing news from a place you're not actually located at. Same as saying "good morning" every day to your "team" when actually it's night at your location.

I read years ago that the US "SEAL Team 6" was named to throw off adversaries (primarily Russia at the time; maybe again now?) that the US actually HAD at least 6 SEAL teams.

TFA said they started by targeting South American organisations, it tallies that they could be Brazilian.

This is reminding me of L in Death Note describing how he tracked Kira down to a particular Japanese neighborhood