Scattered Spider’s heightened activity—here’s the 411

Scattered Spider, a decentralized English-speaking cybercriminal group, is increasingly targeting financial services and insurance using credential-harvesting webpages, SMS phishing, SIM swapping, and social-engineering calls to help desks to reset passwords and register attacker MFA devices; organizations should tighten authentication controls, enforce managed-device logins, and monitor anomalous password resets and MFA additions to mitigate this active threat.