Ransomware in the Cloud: Scattered Spider Targeting Insurance and Financial Industries
ID: dd738146-45f5-55b1-8161-93b84ba76fc0
STIX ID: report--dd738146-45f5-55b1-8161-93b84ba76fc0
Feed Name: infostealers.com
Threat Score
EclecticIQ intelligence details SCATTERED SPIDER’s cloud-centric ransomware and credential-theft campaigns targeting insurance and financial sectors, describing social-engineering (vishing/smishing), automated phishing kits, SIM‑swapping services, credential stealers, abuse of Microsoft Entra ID features (cross-tenant sync, federated IdPs/Golden SAML), RMM/tunnelling, exfiltration methods, IOCs (hashes and phishing domains), and recommended detection and mitigation controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.