Scattered Spider
Roasted 0ktapusOcto TempestStorm-0875UNC3944
UnattributedFinancially motivated criminal group, English-speaking
Scattered Spider is a native English-speaking cybercriminal group active since at least 2022. The group initially targeted customer relationship management (CRM) providers, business process outsourcing (BPO) firms, and telecommunications and technology companies before expanding in 2023 to gaming, hospitality, retail, managed service provider (MSP), manufacturing, and financial sectors.
MITRE ATT&CK Techniques
T1003.003T1006T1016T1018T1021.001T1021.004T1021.007T1041T1059.001T1059.004T1068T1069T1069.002T1070.008T1074T1078T1078.004T1082T1083T1087T1087.002T1090T1098T1098.003T1105T1114T1114.003T1133T1136T1204T1213.003T1213.005T1217T1219.002T1484.002T1486T1490T1530T1538T1539T1543.002T1552.001T1552.004T1553.002T1555.005T1556.006T1556.009T1564.008T1567.002T1572T1578.002T1580T1583.001T1585.001T1588.001T1588.002T1589T1598T1598.003T1598.004T1621T1657T1684.001T1685
Associated Malware
BlackCatConnectWiseLaZagneMimikatzRaccoon StealerRcloneTorWarzoneRATngrok
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.