scattered-spider-conducts-sim-swapping-attacks-12.pdf

Summary

The Scattered Spider threat group (AKA Roasted 0ktapus, UNC3944) has been financially motivated group primarily targets telecommunication service providers. the victims are usually large (Fortune 2000) organizations that have valuable intellectual property assets. Scattered Spider seems to be connected to the operations of the ALPHV ransomware group (AKA BlackCat), either as an initial access broker or an affiliate. Attack Vectors

Scattered Spider conducts SIM swapping attacks using different social engineering techniques, • Callback phishing (in which the threat actors impersonate IT experts to obtain user credentials) • Telegram and SMS phishing messages (smishing) that lead the victims to seemingly legitimate credential-harvesting pages.

• The threat actors also le…