FlagThis
← All Threat Actors
Threat Actor Profile
Scattered Spider
0ktapus
DEV-0971
G1015
LUCR-3
Muddled Libra
Octo Tempest
Oktapus
Roasted 0ktapus
Scatter Swine
Scattered LAPSUS$ Hunters
Scattered Swine
ShinyHunters
SLH
SLSH
Starfraud
Storm-0875
Storm-0971
UNC3944
⚠ Critical Threat
MGM/Caesars Hospitality Extortion, Cloud Identity & SaaS Targeting
Origin
Unknown (likely English-speaking regions)
Sponsor
Criminal organization
Motivation
Financial gain via extortion and data theft
Target Sectors
Hospitality
Technology
Gaming/Casinos
Finance
Telecommunications
Critical Infrastructure
Known TTPs
Social Engineering (Vishing/Phishing)
IT Help Desk Impersonation
SIM Swapping
MFA Fatigue/Push Bombing
Identity Provider (IdP) Exploitation
Cloud Infrastructure Compromise (AWS/Azure)
Session Token Theft
Data Exfiltration
External Resources
MITRE ATT&CK ↗
CISA Advisories ↗
Related Intelligence
Hacking the mainframe…
DEEP DIVE
Extradition of Alleged Scattered Spider Member Peter Stokes
Miscellaneous
2026-07-02
DEEP DIVE
The Dismantling of Scattered Spider: Tyler Robert Buchanan's Guilty Plea and Identity-Centric Attack Vectors in Cloud and MFA Environments
Attacks and Vulnerabilities
2026-05-24
No related stories found in the intelligence database.
SHARE INTELLIGENCE WIRE
×
Story Title
X / Twitter
Bluesky
LinkedIn
Copy Link
LINK COPIED TO CLIPBOARD