New Alert on Cybercrime Gang called #ScatteredSpider, emitida el jueves 16 de noviembre de 2023 por Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are issuing this Joint Cybersecurity Advisory (CSA) in response to recent activity by Scattered Spider threat actors against commercial facility sectors and subsectors. This advisory provides tactics, techniques, and procedures (TTPs) obtained through FBI investigations, through November 2023.
Scattered Spider is a cybercriminal group that targets large enterprises and their information technology (IT) helpdesks. According to trusted third parties, Scattered Spider threat actors often engage in data theft for extortion purposes and are also known to use BlackCat/ALPHV ransomware along with their usual TTPs.
The FBI and CISA encourage critical infrastructure organizations to implement the recommendations in the Mitigations section of this CSA to reduce the likelihood and impact of a cyberattack by Scattered Spider threat actors.