logo

FBI Warns of Increased Scattered Spider Attacks in US

ID: 8d7ad0a2-b038-5f65-8ffd-6d8260dd3ca8

STIX ID: report--8d7ad0a2-b038-5f65-8ffd-6d8260dd3ca8

Feed Name: Halcyon Blog

Threat Score
80/100

Date Published: 2025-06-30

Date Updated: 2026-04-28

...
...

The FBI and industry researchers report that Scattered Spider is actively targeting the airline sector through sophisticated social engineering that defeats MFA and abuses help-desk workflows and third‑party vendor access to rapidly escalate privileges, exfiltrate data, disable recovery systems, and deploy ransomware across hybrid on‑prem/cloud environments; the group acts as modular initial-access brokers and affiliates within the RaaS ecosystem, prompting recommendations to harden identity verification and help-desk procedures.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.