The FBI reported that 'Scattered Spider' relies on social engineering techniques that impersonate employees or contractors to deceive IT help desks into granting access and frequently uses methods to bypass multi-factor authentication by convincing help desk staff to add unauthorized MFA devices to compromised accounts.
high
temporal
Description of attack techniques and MFA-bypass methods attributed to a named cybercriminal group in an FBI advisory.