Tracking Adversaries: Scattered Spider, the BlackCat affiliate
Tags
country: Russia
attack-pattern: Data Bootkit - T1542.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Software - T1592.002 Bootkit - T1067
Show in Graph
Common Information
Type Value
UUID e371fe78-83b1-48a4-84be-3a9efdd6c6eb
Fingerprint 711cd9db0187c5cd
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 16, 2023, 3:46 p.m.
Added to db Aug. 31, 2024, 12:17 a.m.
Last updated Nov. 13, 2024, 12:25 p.m.
Headline @BushidoToken Threat Intel
Title Tracking Adversaries: Scattered Spider, the BlackCat affiliate
Detected Hints/Tags/Attributes 55/2/5
Source URLs
Redirection Url
Details Source https://blog.bushidotoken.net/2023/08/tracking-adversaries-scattered-spider.html
URL Provider
Details Provider Source level domain
Details bushidotoken.net blog.bushidotoken.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 24 ✔ @BushidoToken Threat Intel https://blog.bushidotoken.net/feeds/posts/default?alt=rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 8 
fleetdeck.io
Details Domain 12 
level.io
Details md5 3 
909f3fc221acbe999483c87d9ead024a
Details Mandiant Uncategorized Groups 111 
UNC3944
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 6 
Storm-0875