Scattered Spider
| Nickname | See ยง Names |
|---|---|
| Formation | c. May 2022 |
| Type | Hacker group |
Region served | United States and United Kingdom |
| Methods | Social engineering, ransomware as a service, password cracking |
| Affiliations | ALPHV, ShinyHunters |
purpose. It should be removed.Scattered Spider, also referred to as UNC3944 and more recently identified as ShinyHunters, is a hacking group mostly made up of teens and young adults believed to live in the United States and the United Kingdom. The group is believed to be affiliated with cybercriminal network "The Com", or more specifically "the Hacker Com", a subset of The Com.
The group gained notoriety for their involvement in the hacking and extortion of Caesars Entertainment and MGM Resorts International, two of the largest casino and gambling companies in the United States. Scattered Spider has also targeted Visa, Marks & Spencer, PNC Financial Services, Transamerica, New York Life Insurance, Synchrony Financial, Truist Bank, Twilio, and JLR.
Members of Scattered Spider have been connected with the hacks against Snowflake cloud storage customers in the US. More recently, members of Scattered Spider have been connected with the hacks against Qantas, the flag carrier of Australia.
A collective of cybercrime groups, including Scattered Spider, Lapsus$ and ShinyHunters was forged in 2025, and has created at least 16 Telegram channels since August 8, 2025.