‘0ktapus’ hackers are back and targeting tech and gaming companies, says leaked report

guest · Feb 3, 2023

By Lorenzo Franceschi-Bicchierai @lorenzofb @lorenzofb@infosec.exchange - February 2, 2023

The hackers who reportedly hit more than 130 organizations last year and stole the credentials of almost 10,000 employees are still targeting several tech and video game companies, according to a report obtained by TechCrunch.
Click to expand...

The report, prepared by cybersecurity firm CrowdStrike, calls the hackers “Scattered Spider.” In a previous publicly available report, the company said this group is also known as “Roasted 0ktapus” in an apparent reference to the report published by Group-IB, another cybersecurity firm, last year.

Two cybersecurity insiders, who asked to remain anonymous as they were not authorized to speak to the press, said that the understanding within the industry is that Scattered Spider is the same group as 0ktapus.

“Scattered Spider continued deploying numerous phishing pages in January 2023. CrowdStrike Intelligence assesses the adversary has likely expanded its target scope to include technology sector companies specializing in gaming or financial software, while maintaining a prior focus on business process outsourcing (BPO) companies and cellular providers,” read the report, which is not publicly available.
Click to expand...

It’s unclear if this is the same group that hacked Riot Games last month, but in a list of phishing domains included in the CrowdStrike report, there’s one that was clearly made to target the video game giant given that it includes the name of the company in the URL.

Among the phishing domains, there’s also others tailored to impersonate video game makers Roblox and Zynga, email marketing and newsletter giant Mailchimp and its parent company Intuit, Salesforce, Comcast, and Grubhub.
Click to expand...

The report said that “the majority” of the hacking group’s phishing pages were designed to mimic Okta login portals, “while a much smaller number impersonated Microsoft.”
Click to expand...

Log in or Sign up

‘0ktapus’ hackers are back and targeting tech and gaming companies, says leaked report

guest Guest

Log in or Sign up

‘0ktapus’ hackers are back and targeting tech and gaming companies, says leaked report

guest Guest

Useful Searches