The Rise and Fall of the Scattered Spider Hackers: A Look at a Disassembled Web
Matilda
The Rise and Fall of the Scattered Spider Hackers: A Look at a Disassembled Web
For over two years, a group of hackers known as Scattered Spider weaved a web of cybercrime, targeting some of the world's biggest tech companies. Now, authorities are unraveling that web, bringing some members to justice. This comprehensive guide dives into the story of Scattered Spider, exploring their techniques, targets, and the dismantling of their operation. Early Warnings: The Oktapus Phishing Spree The first signs of trouble emerged in August 2022. Security researchers sounded the alarm about a sophisticated phishing campaign targeting over 130 organizations. This group, dubbed "Oktapus" due to their focus on Okta, a single sign-on provider, compromised nearly 10,000 employee credentials. Oktapus' Trail of Destruction The list of Oktapus' victims reads like a who's who of the tech industry: Caesars Entertainment, Coinbase, DoorDash, Mailchimp, Riot Games, Twilio (twice), and dozens more fell prey to their attacks. Their most significant impact came in Sept…