What Is Scattered Spider?

Scattered Spider is a financially motivated cybercriminal group active since 2022 that specializes in highly effective social engineering and targeted intrusion campaigns against large organizations (telecommunications, tech, leisure, healthcare, finance). The group leverages techniques such as SIM swapping, help-desk impersonation, MFA fatigue, and legitimate remote-access tools (ScreenConnect, TeamViewer) to establish access, exfiltrate data, and deploy BlackCat/ALPHV ransomware in double-extortion attacks; the report also provides pragmatic defensive guidance including phishing-resistant MFA, segmentation, EDR, application controls, and robust backups.