As the FBI Closes In, Scattered Spider Attacks Finance, Insurance Orgs
ID: 44ebba72-0a23-5c27-8eee-bcbfef6ca6e5
STIX ID: report--44ebba72-0a23-5c27-8eee-bcbfef6ca6e5
Feed Name: Dark Reading
Threat Score
Scattered Spider (aka UNC3944 and other aliases) is conducting fast, targeted campaigns against finance and insurance firms — reportedly compromising at least 29 organizations — by deploying lookalike Okta and CMS sign-in pages with potential SIM-swap follow-ons to exfiltrate sensitive data; the FBI is actively pursuing attribution and legal action but faces challenges in proving crimes and disrupting the group.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.