Description

Scattered Spider is a native English-speaking cybercriminal group that has been active since at least 2022. Initially targeting customer relationship management (CRM) and business-process outsourcing (BPO) firms, as well as telecommunications and technology companies, they expanded their operations in 2023 to compromise victims in the gaming, hospitality, retail, MSP, manufacturing, and financial sectors. Their tactics include targeted social engineering, bypassing endpoint security tools, and deploying ransomware.