By Zeba Siddiqui | May 11, 2024 The FBI is intensifying its efforts to charge the Scattered Spider hackers, a criminal gang primarily operating in the U.S. and Western countries, which has compromised dozens of American organizations. The group gained notoriety last year after targeting casino operators MGM Resorts International and Caesars Entertainment, encrypting their systems and demanding significant ransom payments.
Brett Leatherman, the FBI’s cyber deputy assistant director, revealed to Reuters that the agency is aiming to prosecute these hackers under the Computer Fraud and Abuse Act. This task involves collaborating with private security firms to gather necessary evidence, Leatherman explained during the RSA Conference in San Francisco. He acknowledged the group’s diverse makeup, a blend of Western and Eastern European hackers, which is uncommon outside hacktivist circles.
Scattered Spider has been closely monitored by security researchers since 2022 and is known for its aggressive tactics. The gang is particularly adept at impersonating IT helpdesk staff to infiltrate company networks, often employing phishing attacks. Despite a temporary lull in January, the group has recently ramped up its activities, according to Charles Carmakal, Chief Technology Officer at Google’s Mandiant security arm.
The hackers have breached over 100 organizations, consistently gaining access and posing a significant threat. Caesars reportedly paid approximately $15 million to regain control of its systems.
Law enforcement agencies have been criticized for their lack of arrests despite Scattered Spider’s continued attacks. However, the FBI has managed to apprehend one member so far: Noah Urban, a 19-year-old from Florida charged with wire fraud. More arrests are anticipated, as some members are juveniles. Leatherman indicated that state and local laws could be employed to hold these individuals accountable effectively.
“This is an incredibly important group for us to continue to look at disruption opportunities for,” said Leatherman, emphasizing the agency’s urgency in taking swift action.
