Despite Arrests, Scattered Spider Continues High-Profile Hacking

The report details ongoing activity by the Scattered Spider cybercriminal group that leverages advanced social-engineering techniques (SIM swapping, MFA bombing) to steal credentials and gain privileged access, deploying ransomware and data-extortion (notably ALPHV/BlackCat and DragonForce) against high-value targets such as casino operators and major retailers; it also covers recent arrests, the group’s resilience and shift to distributed affiliate models, and defensive recommendations like non-SMS MFA and domain blocking.