Imagine empty supermarket shelves, planes grounded, essential services at a standstill… No, this is not the beginning of the collapse of our society, but rather cyberattacks on an unprecedented scale, orchestrated by a group of young hackers: Scattered Spider (literally “scattered spider” in French). According to the American magazine Wired, this collective, made up mainly of adolescents and young adults, is now worrying authorities and businesses around the world.
Scattered Spider has become known for its sophisticated hacking methods, based on social engineering. Their main weapon? Trick corporate IT departments to gain privileged access and then deploy ransomware (ransomware) or extort victims using the sensitive data recovered. Their strength lies in their ability to adapt quickly, successively targeting different sectors: mass distribution, insurance, airlines.
Young people who don’t want it
After a period of relative discretion in 2024, following arrests and police pressure, the group has returned in force in recent months. Attacks are increasing, affecting the United Kingdom, the United States and Canada. The authorities, such as the FBI or the British National Crime Agency, are sounding the alarm. Scattered Spider is now expanding its targets, sparing no strategic sector.
What strikes the experts is the youth and financial motivation of the group members. Mostly English-speaking, often based in the United States or the United Kingdom, they share their techniques and exploits on platforms like Discord or Telegram. Their decentralized structure, close to a cybercrime black market, makes their neutralization particularly difficult.
Even if the authorities believe that the core of the group is made up of four essential members, it nevertheless relies on a vast network, made up of thousands of cybercriminals with varied profiles. Some members specialize in hacking large companies, others prefer more discreet targets like cryptocurrency accounts. This diversity and this capacity to renew itself make the phenomenon extremely resilient.
Faced with this evolving and inventive threat, experts are calling for increased vigilance and a rethinking of defense strategies. Because, as a Google analyst points out, “we are no longer fighting a simple group, but an entire ecosystem where each actor is replaceable”.
