new Scattered Spider phishing domain

Despite several arrests last year, Scattered Spider's social engineering attacks are continuing into 2025 as the cybercrime collective targets high-profile organizations and adds another phishing kit to its arsenal along with a new version of Spectre RAT malware.

Plus, in welcome news to anyone who isn't a Rick Astley fan, it appears the miscreants have given up on Rickrolling their victims, at least as of February, according to threat detection firm Silent Push.

In addition to publishing details about all five unique Scattered Spider phishing kits in research published today, the threat hunters shared their analysis of the new malware, which the attackers use to gain persistent access to compromised systems and steal sensitive data. Silent Push also made available code for a Spectre RAT string decoder and command and control (C2) emulator that defenders can use in their efforts to squash the eight-legged menace.

After a series ...