Scattered Spider operation — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 12, 2025
Last Seen
November 12, 2025

The Scattered Spider operation is a threat campaign centered on phishing-driven intrusion that leverages trusted online platforms to harvest credentials and gain initial access.

Overview

The Scattered Spider operation is a threat campaign centered on phishing-driven intrusion that leverages trusted online platforms to harvest credentials and gain initial access. It aligns with a 2025 pattern of attackers exploiting legitimate services to bypass defenses, making it a significant risk due to the widespread trust users place in popular platforms.

Related Threat Clusters

  • Phishing Attacks Increase by 67% in 2025 Using Trusted Platforms

    In 2025, phishing incidents targeting businesses have surged significantly, with a 67% increase in the exploitation of established platforms like QuickBooks, Zoom, SharePoint, and PayPal. Cybercriminals are leveraging…

    2 articles · Updated November 12, 2025
  • Surge in Phishing Attacks Exploiting Trusted Platforms in 2025

    In 2025, phishing incidents targeting businesses have increased significantly, as reported by KnowBe4. The 2025 Phishing Threat Trends Report indicates a 67% rise in the abuse of legitimate business platforms like…

    2 articles · Updated November 12, 2025

Recent Intelligence Reports

  • Phishing attacks surge as criminals exploit trusted platforms in 2025 — Securitybrief.Au · November 12, 2025
  • Phishing attacks surge as criminals exploit trusted platforms in 2025 — Securitybrief · November 12, 2025

CVSS v3.1 Breakdown