#
Scattered Spider
#
Adversary Overview
Scattered Spider is a financially motivated cybercriminal group that has been active since early 2022, targeting a wide variety of industries across the world. Their focus has been impacting organizations with large financial payouts like technology, telecommunications, finance, an entertainment industry. The group is known known for their ability to live off the land and leverage legitimate tools to evade detection. The cybersecurity community has equated Scattered Spider’s understanding of endpoint detection and response (EDR) and single sign-on (SSO) capabilities to that of Sysadmins or Red Teamers. They are considered to be formidable in cloud environments and specialize in credential harvesting techniques and social engineering tactics to gain access to networks.