Best podcast episodes on the Scattered Spider attacks
In September 2023, MGM Resorts and Caesars Entertainment disclosed cyberattacks in SEC filings, and Caesars said its intrusion began with a social engineering attack on an outsourced IT support vendor. A joint CISA and FBI advisory describes Scattered Spider's methods: posing as IT or help desk staff, push bombing, and SIM swapping to obtain credentials and bypass MFA.
Sources: sec.gov, sec.gov, cisa.gov
5 episodes from 4 shows. Dates and lengths are from each show's own feed.
- 01
· 30 min · Beginner
A plain-language profile of how the group fools people rather than breaking systems.
- 02
Microsoft Threat Intelligence Podcast
Octo Tempest Threat Actor Profile
· 46 min · Practitioner
Microsoft's researchers on the group they track as Octo Tempest: SIM swapping, SMS phishing, and hands-on persistence.
- 03
Spinning the web of tangled tactics.
· 23 min · Practitioner
GuidePoint's incident responders on the tools and playbooks that tie intrusions to the group.
- 04
· 18 min · Practitioner
Kroll on the group's industry-by-industry targeting and how defenders in the next sector can prepare.
- 05
Microsoft's Secret Weapon: The GDID That Caught 'Scattered Spider' Teen
· 96 min · Expert
A half-hour segment on how a Windows device identifier in an indictment tied a suspect to an intrusion.