Dark Web Profile: Scattered Spider

Scattered Spider is a loosely organized English-speaking cybercriminal collective (aliases include Muddled Libra, UNC3944, Starfraud, Octo Tempest) that has progressed from phishing and credential theft to sophisticated social‑engineering intrusions, ransomware (BlackCat, Qilin) and high-profile data extortion campaigns targeting enterprises worldwide (notable incidents: MGM Resorts, Caesars, Riot Games). The profile outlines their TTPs mapped to MITRE ATT&CK, exploited CVEs, toolset (e.g., Raccoon Stealer, Vidar, Mimikatz), observed lateral movement and exfiltration techniques, and recommends stronger MFA, phishing protection, patching, monitoring, and tested incident response.