FlagThis

The “Scattered Spider” hacking group, also known as 0ktapus, targeted major tech companies like Coinbase, DoorDash, Mailchimp, and Twilio. After evading capture for over two years, U.S. authorities apprehended at least some members of this group responsible for a significant hacking spree. The group’s sophisticated attacks resulted in the theft of substantial amounts of sensitive data and financial losses. This highlights the ever-evolving nature of cyber threats and the need for robust security measures across various industries.

References:

• TechCrunch - TechCrunch details the rise and fall of the Scattered Spider hackers, highlighting their sophisticated techniques and the eventual apprehension by authorities. - 11h
• Over Security - KrebsOnSecurity reports on federal charges against five men allegedly involved in the Scattered Spider hacking group, noting their numerous targets among major technology companies. - 11h
• SecureWorld News - SecureWorld reports on the DOJ's crackdown on the Scattered Spider phishing ring, detailing the scale of their operations and the resulting financial theft. - 11h
• @zackwhittaker - After evading capture for more than two years following a hacking spree that targeted some of the world’s biggest tech companies, including Coinbase, DoorDash, Mailchimp and Twilio (twice), U.S. aut - 9h

Classification:

• HashTags: ScatteredSpider HackingGroup Cybersecurity
• Company: Coinbase DoorDash Mailchimp Twilio
• Target: various tech companies
• Attacker: Scattered Spider
• Product: various
• Feature: account takeover
• Type: Hack
• Severity: Major