Scattered Spider and ShinyHunters are identified as the same entity within the cyber threat landscape. UNC6040 operates as a financially motivated cluster, employing voice phishing to target organizations using Salesforce for data theft. Their strategies include impersonating IT support to manipulate employees into granting access to sensitive information. Google's Threat Intelligence Group has investigated the links between these threat actors, recognizing patterns in attacks but noting that further evidence is required to confirm unequivocal connections between their activities.
UNC6040 is a financially motivated threat cluster focusing on vishing campaigns to compromise Salesforce instances for data theft. They manipulate employees through social engineering.
ShinyHunters and Scattered Spider are considered to potentially be associated according to Google's Threat Intelligence Group, but definitive links have yet to be established.
Collection
[
|
...
]