Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

Microsoft has observed the cybercrime group Scattered Spider expanding its toolkit to include ransomware strains like RansomHub and Qilin; the report links these deployments to complex social-engineering intrusions, targeting (including VMware ESXi), and collaboration/overlap with other financially motivated clusters (Manatee Tempest, Mustard Tempest). It highlights RansomHub’s rebranding origins, related malware such as FakeUpdates and Raspberry Robin, and the broader emergence of new ransomware families, advising organizations to follow credential hygiene, least privilege, and Zero Trust principles.