November 16, 2023 at 07:19PM
The FBI is intensifying efforts to locate members of the Scattered Spider cyber-crime group, responsible for attacking major casinos and conducting network intrusions. The group exfiltrates data and demands payment in exchange for not leaking or selling the information. Several organizations, including MGM Resorts, experienced significant disruptions, resulting in financial losses. Scattered Spider has targeted over 100 organizations. The FBI is urging organizations to share information about the group. The FBI and CISA issued a joint advisory detailing the tactics used by Scattered Spider, including social engineering and SIM swapping scams. Victim reporting is crucial for taking enforcement action against the group. The FBI is currently investigating but declined to provide further details.
Key points from the meeting notes:
– The FBI is actively pursuing the Scattered Spider cyber-crime crew, a loose-knit group of teenagers and young males based in the US and UK.
– Scattered Spider has targeted high-profile casinos such as Caesars Entertainment and MGM Resorts, breaking into their IT systems and demanding ransom for stolen data.
– MGM Resorts suffered significant system outages and incurred losses of $100 million due to the intrusion, while Caesars reportedly paid $15 million but experienced less downtime.
– Scattered Spider has also targeted at least 100 other organizations as of September 2023.
– The FBI and CISA are encouraging organizations to share information about Scattered Spider’s activities to help identify techniques and protect against the threat.
– The advisory issued by the FBI and CISA outlines social engineering tactics used by Scattered Spider to gain access to networks.
– The gang has impersonated IT staff, manipulated multi-factor authentication, and engaged in SIM swapping scams.
– Once inside a network, Scattered Spider exfiltrates sensitive data and attempts to extort large sums of money.
– Victim reporting is crucial for law enforcement to take enforcement action against the gang.
– The FBI is facing criticism for the perceived delay in arresting Scattered Spider members, but the official assures that actions are being taken, referencing recent successful takedowns of other cybercriminal groups.