CISA and partners update joint advisory on ‘Scattered Spider’ as threat group ramps up attacks on critical infrastructure

The Cybersecurity and Infrastructure Security Agency has updated a joint advisory with new tactics, techniques and procedures observed by a cyber threat group identified in 2023 as “Scattered Spider,” in collaboration with the FBI and international partners.

“Scattered Spider is a cybercriminal group that targets large companies and their contracted information technology (IT) help desks. Scattered Spider threat actors, per trusted third parties, have typically engaged in data theft for extortion and have also been known to use several ransomware...