Vectra AI Threat Briefing: Scattered Spider by Vectra AI Product Team

Scattered Spider (aka Starfraud/UNC3944 and other aliases) is an active, financially motivated threat actor group that focuses on identity-based cloud intrusions to enable ransomware and extortion. The briefing describes their effective use of MFA bypass techniques (SIM swap, MFA bombing, voice phishing), pivot from Entra/Azure PaaS into IaaS, living-off-the-land lateral movement, and their affiliate relationship with ALPHV/BlackCat; it also outlines detection and response coverage from Vectra AI.