What is Scattered Spider?

Scattered Spider, aka UNC3944, is a financially motivated threat actor that has been active since March 2022 and historically targeted telecommunications, cryptocurrency, and business process outsourcing (BPO) organizations. The group compromises data by targeting users in social engineering attacks directed at the user’s phones to steal their credentials and use them to gain access to systems that host sensitive data. The group became more widely known after it successfully targeted and gained access to the infrastructure of Caesars Entertainment in 2023.