Service desk account recovery can bypass stronger login controls
A Specops explainer cites Scattered Spider, deepfakes and voice phishing as reasons to drop knowledge-based checks.
1
Stories per day · 30 days
Relatedsocial-engineering3identity2mfa2shinyhunters2vishing2clickfix1data-breach1doxxing1dragonforce1extortion1github1help-desk1kroll1lapsus1npm1oauth-tokens1ransomware1semperis1
12 stories, newest first · one card per story
Stories tagged #scattered-spider
Kroll: tech-firm breaches drove most third-party victim impact
From June 2025 to June 2026, tech compromises accounted for 60% of all breach victims Kroll counted.
1
Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
1
Scattered Spider uses help-desk calls to bypass MFA
Flare says a help-desk call alone does not prove the group, and CISA urges phishing-resistant MFA.
1
Flare says Scattered Spider, LAPSUS$ and ShinyHunters are separate clusters
Shared branding does not prove one gang; Flare treats original LAPSUS$ as defunct after September 2022.
2
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
Semperis survey finds 37% of ransomware cases include psychological or physical threats against staff and families.
2
Another ShinyHunters suspect arrested
Authorities arrested a teenage ShinyHunters suspect in Jordan, the second member detained after a Dutch arrest.
1
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
Jordan detained ShinyHunters suspect Rey, who is reportedly helping the FBI identify other members.
4
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
Jordan reportedly detained ShinyHunters suspect Saif al-Din Khader, who is helping the FBI find other members.
4
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters
Dutch police arrested 24-year-old Pepijn van der Stap, alias Umbreon, in the ShinyHunters investigation; he appeared before Rotterdam District Court.
4
Early Scattered Spider member pleads guilty to cybercrime spree
Early Scattered Spider member Ahmed Elbadawy pleaded guilty to wire fraud conspiracy and identity theft, with prosecutors seeking $17.6 million in forfeiture.
3
MFA's Weakest Link: Account Recovery Is the New Attack Path
Help desk account recovery is increasingly the weakest link in MFA-protected identities, as Scattered Spider's impersonation-driven Marks & Spencer attack demonstrated.
2