G1015

Scattered SpiderScattered Spider

Also known as: UNC3944 · Muddled Libra · Oktapus · Scattered Swine · Scatter Swine · Octo Tempest · 0ktapus · Storm-0971 · DEV-0971 · Starfraud · Scattered Spider

Known aliases
11

Profile

Scattered Spider is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as UNC3944, Muddled Libra, Oktapus (and 7 more). Original record: Scattered Spider, a highly active hacking group, has made headlines by targeting more than 130 organizations, with the number of victims steadily increasing.

Aliases· 11

UNC3944Muddled LibraOktapusScattered SwineScatter SwineOcto Tempest0ktapusStorm-0971DEV-0971StarfraudScattered Spider

MITRE ATT&CK Group crosswalk

G1015

References

  1. https://www.cybersecurity-insiders.com/scattered-spider-managed-mgm-resort-network-outage-brings-8m-loss-daily/
  2. https://www.loginradius.com/blog/identity/oktapus-phishing-targets-okta-identity-credentials/
  3. https://www.attackiq.com/2023/11/21/attack-graph-response-to-cisa-advisory-aa23-320a/
  4. https://www.mandiant.com/resources/blog/unc3944-sms-phishing-sim-swapping-ransomware

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
MIMIC SPIDER
Actor
UNION SPIDER
Actor
SMOKY SPIDER
Actor
LAPSUS
Actor
LUNAR SPIDER
Actor
MONTY SPIDER
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.