Scattered_Spider__2023__aa23-320a_scattered_spider.pdf

This joint FBI-CISA Cybersecurity Advisory describes Scattered Spider, a threat actor group known for data theft, extortion, and ransomware activities. It catalogs their social engineering techniques, use of legitimate remote-access tools and malware, and recent tactics such as file encryption after exfiltration, followed by guidance on mitigations, detection, and reporting to reduce risk for critical infrastructure and other organizations.