Group-IB Analysis: Scattered Spider a Decentralized Cybercrime Collective (infosecurity-magazine.com)

• Scattered Spider is a decentralized collective of independent clusters.
• No central hierarchy; clusters share tactics but operate separately.
• Social engineering and phishing are core methods.
• Arrests of individuals unlikely to stop the collective.

"Group-IB has reclassified Scattered Spider as a decentralized collective of independent clusters, not a unified gang. The analysis, published June 7, 2026, shows clusters share tactics, tools, and communities but operate separately without central hierarchy. This structure explains continued activity despite arrests. Social engineering remains central, with phishing targeting Okta, Microsoft, Citrix, and Google."