Cyber threat actor
Scattered Spider
Financially motivated criminal collective (loosely organized, English-speaking) · active since 2022
Social-engineering-focused group known for SIM-swapping and help-desk impersonation attacks against major US casino, telecom and technology companies, often partnering with ransomware operators.
Aliases
UNC3944Muddled LibraOcto Tempest
Primary targets
Casinos/hospitality Telecom Technology companies BPO/help-desk providers
MITRE ATT&CK techniques
0 techniques mapped · click any technique ID to open the MITRE ATT&CK entry, any CVE to view its NVD record, or any citation for source reporting.
No MITRE ATT&CK mapping available yet for Scattered Spider.
Curated incidents
- 2023-09-01·Hospitality·United StatesScattered Spider social-engineers help desks at major US casino operators
Help-desk impersonation enabled MFA resets leading to ransomware deployment and multi-day outages at Las Vegas casino properties.