Scattered Spider Malware Attacks Klaviyo, HubSpot, and Pure Storage Services
ID: 59228c68-c5a3-540c-94f6-64b5b0999480
STIX ID: report--59228c68-c5a3-540c-94f6-64b5b0999480
Feed Name: Cyber Press
Threat Score
Silent Push reports that Scattered Spider (UNC3944) continues evolving and actively targets major SaaS and enterprise service providers through 2025 using updated phishing kits, dynamic DNS/subdomain impersonation, and a new Spectre Remote Access Trojan with modular capabilities and persistence; the report documents infrastructure shifts to privacy-focused registrars and ephemeral hosting, provides multiple domain IOCs tied to recent campaigns, and warns that the group remains resilient despite prior arrests.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.