Scattered Spider
Profile
Malicious
Category
Threat Actor Group
Threat Type
Unknown
Country
scattered_spider
The profile key is a unique identifier for this threat actor. It can be used to query the Validin APIs as the
threat_key for information about this threat actor.
Last Updated
Indicator Breakdown
Summary
Indicator Activity
Loading activity...
No indicators recorded yet.
Description
Scattered Spider is a native English-speaking cybercriminal group that has been active since at least 2022. Initially targeting customer relationship management (CRM) and business-process outsourcing (BPO) firms, as well as telecommunications and technology companies, they expanded their operations in 2023 to compromise victims in the gaming, hospitality, retail, MSP, manufacturing, and financial sectors. Their tactics include targeted social engineering, bypassing endpoint security tools, and deploying ransomware.
Aliases (3)
Roasted 0ktapus
Alias
Octo Tempest
Alias
Storm-0875
Alias
Targets (10)
CRM
Target
BPO
Target
Telecommunications
Target
Technology
Target
Gaming
Target
Hospitality
Target
Retail
Target
MSP
Target
Manufacturing
Target
Financial
Target