Scattered Spider
High ConfidenceHigh ThreatUNC3944 • Roasted 0ktapus • Scatter Swine • Muddled Libra • Starfraud
Scattered Spider, also known as UNC3944 or Octo Tempest, is a financially motivated threat actor composed primarily of young, English-speaking individuals. Active since at least 2022, the group specializes in social engineering attacks against help desks and IT support personnel to gain initial access. Scattered Spider has conducted high-profile attacks against major technology, telecommunications, and hospitality companies, often deploying ransomware after extensive network reconnaissance. The group is notable for their sophisticated voice phishing (vishing) capabilities and ability to bypass multi-factor authentication.
Scattered Spider, also known as UNC3944 or Octo Tempest, is a financially motivated threat actor composed primarily of young, English-speaking individuals. Active since at least 2022, the group specializes in social engineering attacks against help desks and IT support personnel to gain initial access. Scattered Spider has conducted high-profile attacks against major technology, telecommunications, and hospitality companies, often deploying ransomware after extensive network reconnaissance. The group is notable for their sophisticated voice phishing (vishing) capabilities and ability to bypass multi-factor authentication.
Target Sectors
Target Regions
Attributed to Cybercriminal (No State Sponsor) (United States/United Kingdom). Attribution confidence: High.
Future Outlook
Scattered Spider is expected to continue operations targeting Telecommunications sectors.
First observed activity of Scattered Spider
Continued active operations