The Helpdesk Hustle: How Scattered Spider Cons Its Way Inside

Scattered Spider has emerged as a prominent name associated with some of the most disruptive cyber incidents in recent years. From ransomware to data breaches, this loosely affiliated group of young, Western-based hackers is known for their speed, creativity, and bold targeting of major organisations, including high-profile attacks on MGM Resorts, Caesars Entertainment, and most recently UK retailer, Marks and Spencer. 

In this episode of Cyber Insiders, Adarma’s Threat Lead, Cian Heasley, explores who Scattered Spider are, how they operate, and why they’ve become such a serious concern for the cybersecurity community.

What’s covered: 

• The tools and social engineering techniques that set them apart 

• How they bypass traditional defences 

• Why many organisations remain vulnerable to these fast-moving attacks 

• What can be done to better detect, contain, and respond 

We also discuss recent events, including how organisations are reacting, adapting, and learning from attacks believed to be linked to Scattered Spider. 

Watch the full episode to get expert insight into one of today’s most talked-about threat actors and practical guidance on how to defend against them. We’ll also share how Adarma is proactively responding to recent Scattered Spider activity and helping protect large, complex organisations in high-risk sectors from similar threats.  

Watch now on our YouTube channel or search Cyber Insiders on your podcast app to listen. 

Here are some additional resources on threat intelligence for the retail sector:

• DragonForce Threat Profile: The Rising Ransomware Gang Targeting UK Retailers
• Retail Under Attack: What You Need to Know About DragonForce Ransomware
• Retail Threat Landscape Report – A look back over threat activity in Q1, 2025​
• Strengthening Cyber Resilience in Retail