Blurring Lines Between Scattered Spider & Russian Cybercrime
ID: 79e5b2cc-4944-5751-b83b-2a5bbe36fd8e
STIX ID: report--79e5b2cc-4944-5751-b83b-2a5bbe36fd8e
Feed Name: Dark Reading
Threat Score
The article describes Scattered Spider (UNC3944/Octo Tempest) re-emerging in 2024 and expanding from social-engineering-driven identity takeovers and infostealers to partnering with Russian-speaking ransomware affiliates (e.g., DragonForce), facilitating high-profile ransomware and extortion campaigns against major targets such as MGM, Caesars and several UK retailers; researchers warn this evolution increases the group's capability and danger despite prior arrests.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.