What other aliases and vendor names is Scattered Spider known by?

Scattered Spider is tracked across the cybersecurity industry by multiple aliases, including: 0ktapus, Bling Libra, DEV-0971, G1015, G1057, Gnostic Players, LUCR-3, Muddled Libra.

What are the primary motivations and sponsors of Scattered Spider?

Scattered Spider operates from English-speaking regions with primary motivation categorized as financial gain via data extortion and ransomware-as-a-service (RaaS), sponsored or affiliated with criminal organization.

What vulnerabilities and CVEs does Scattered Spider actively exploit?

Scattered Spider has been observed weaponizing vulnerabilities including CVE-2021-44228, CVE-2024-21413.

Scattered Spider | Threat Actor Profile & Attack Matrix

Scattered Spider

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat English-speaking regions

MGM Resorts and Caesars Entertainment Breach, Telecommunications Infrastructure Targeting, Cloud Identity Hijacking Wave

Scattered Spider

⚔️ Weaponized CVE Matrix (2)

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (9 TTPs)

📰 Verified Campaigns & Intelligence Archive

Scattered Spider

⚔️ Weaponized CVE Matrix (2)

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (9 TTPs)

📰 Verified Campaigns & Intelligence Archive

SHARE INTELLIGENCE WIRE