Every Halloween, the world indulges in fear – haunted houses, horror films and ghost stories. But for cybersecurity leaders, the real horror stories happen in broad daylight, and not just on October 31st.
In 2025, cybercrime has entered a new season of terror. Once-distinct adversaries – state actors, criminal gangs, hacktivists – have merged into an unpredictable ecosystem that moves faster, strikes harder and never sleeps, with AI as the ultimate enabler. Leading this evolution is Scattered Spider, the shapeshifting collective whose tactics have become the blueprint for modern digital crime.
The nightmare of scattered spider
Scattered Spider, also known as UNC3944, first gained notoriety for social-engineering-driven breaches against major global organisations. But what began as a small group of young opportunists has matured into something far more dangerous: a decentralised, AI-fuelled crime ring.
Their ability to infiltrate organisations through human and machine identities alike exemplify the modern threat actor. They blend sophisticated phishing campaigns with deepfake audio, hijacked credentials, and advanced persistent techniques. Their success lies in…
