Cloud-busting ransomware gang likened to Scattered Spider
Tags
attack-pattern: Data Model Credentials - T1589.001 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID ec4e3232-8153-4f39-8920-915b17be2a09
Fingerprint a73d09d903c68ec7
Analysis status DONE
Considered CTI value 1
Text language
Published Sept. 27, 2024, 1:35 p.m.
Added to db Sept. 27, 2024, 4:55 p.m.
Last updated Oct. 11, 2024, 10:13 p.m.
Headline Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud
Title Cloud-busting ransomware gang likened to Scattered Spider
Detected Hints/Tags/Attributes 51/1/1
Source URLs
Redirection Url
Details Redirection https://packetstormsecurity.com/news/view/36403/Ransomware-Gang-Using-Stolen-MS-Entra-ID-Creds-To-Bust-Into-Cloud.html
Details Source https://www.theregister.com/2024/09/27/microsoft_storm_0501/
URL Provider
Details Provider Source level domain
Details packetstormsecurity.com packetstormsecurity.com
Details theregister.com www.theregister.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 214 ✔ Hacker News ≈ Packet Storm https://rss.packetstormsecurity.com/news/tags/hacker/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 31 
Storm-0501