Windows is watching: Anti-piracy tool fingers Scattered Spider suspect
ID: 8a1c2cd2-bd46-505e-a543-787df666832b
STIX ID: report--8a1c2cd2-bd46-505e-a543-787df666832b
Feed Name: The Register (Security)
Threat Score
The DOJ complaint alleges Peter Stokes participated in Scattered Spider operations that compromised employee accounts across more than 100 corporate networks for data exfiltration and ransomware—purportedly yielding over $100M—and investigators used Microsoft Windows Global Device Identifier (GDID) telemetry, ngrok records, and VPN logs to link online activity to the suspect.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.