<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>RuntimeRebel — #Scattered Spider</title><description>Cybersecurity articles tagged #Scattered Spider on RuntimeRebel.</description><link>https://runtimerebel.com</link><item><title>Scattered Spider Sentencing: Analysis of the £29M TfL Breach</title><link>https://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breach</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breach</guid><description>Two Scattered Spider members sentenced for the 2024 TfL breach, costing £29 million and disrupting 148 systems. Learn about their TTPs and recovery costs.</description><pubDate>Fri, 17 Jul 2026 02:45:29 GMT</pubDate><category>Scattered Spider</category><category>Transport for London</category><category>National Crime Agency</category><category>Social Engineering</category><category>Identity Theft</category></item><item><title>UK Sentences Scattered Spider Hackers Over 2024 TfL Breach</title><link>https://runtimerebel.com/blog/uk-sentences-scattered-spider-hackers-over-2024-tfl-breach</link><guid isPermaLink="true">https://runtimerebel.com/blog/uk-sentences-scattered-spider-hackers-over-2024-tfl-breach</guid><description>Two Scattered Spider members sentenced in the UK for the 2024 TfL cyberattack. Detailed analysis of threat actor tactics and defensive recommendations.</description><pubDate>Thu, 16 Jul 2026 14:09:11 GMT</pubDate><category>Scattered Spider</category><category>Transport for London</category><category>UNC3944</category><category>Cybercrime Sentencing</category><category>Tfl Breach</category></item><item><title>Scattered Spider Members Sentenced for Transport for London Attack</title><link>https://runtimerebel.com/blog/scattered-spider-members-sentenced-for-transport-for-london-attack</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-members-sentenced-for-transport-for-london-attack</guid><description>Two members of the Scattered Spider threat group were sentenced to five years in prison for the 2024 TfL breach that exposed 5,000 customers&apos; bank details.</description><pubDate>Thu, 16 Jul 2026 14:08:13 GMT</pubDate><category>Scattered Spider</category><category>Tfl</category><category>Social Engineering</category><category>UNC3944</category><category>Uk Cyber Sentencing</category></item><item><title>Windows Device ID Aids FBI in Tracing Alleged Scattered Spider Hacker</title><link>https://runtimerebel.com/blog/windows-device-id-aids-fbi-in-tracing-alleged-scattered-spider-hacker</link><guid isPermaLink="true">https://runtimerebel.com/blog/windows-device-id-aids-fbi-in-tracing-alleged-scattered-spider-hacker</guid><description>A court filing reveals how a persistent Windows device ID helped the FBI trace an alleged Scattered Spider hacker to a luxury retailer intrusion.</description><pubDate>Tue, 07 Jul 2026 14:38:06 GMT</pubDate><category>Scattered Spider</category><category>FBI</category><category>Attribution</category><category>Windows Device ID</category><category>Peter Stokes</category><category>OPSEC</category><category>Digital Forensics</category></item><item><title>Peter Stokes Extradition: Impact on Scattered Spider Operations</title><link>https://runtimerebel.com/blog/peter-stokes-extradition-impact-on-scattered-spider-operations</link><guid isPermaLink="true">https://runtimerebel.com/blog/peter-stokes-extradition-impact-on-scattered-spider-operations</guid><description>Technical analysis of the extradition of Peter Stokes and the persistent TTPs of the Scattered Spider threat actor group targeting enterprise networks.</description><pubDate>Fri, 03 Jul 2026 10:40:26 GMT</pubDate><category>Scattered Spider</category><category>UNC3944</category><category>Peter Stokes</category><category>Social Engineering</category><category>Ransomware</category></item><item><title>Alleged Scattered Spider Hacker Extradited: Mitigating Social Engineering</title><link>https://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineering</link><guid isPermaLink="true">https://runtimerebel.com/blog/alleged-scattered-spider-hacker-extradited-mitigating-social-engineering</guid><description>An alleged Scattered Spider member&apos;s extradition highlights ongoing efforts against sophisticated social engineering and identity-based attacks impacting major…</description><pubDate>Thu, 02 Jul 2026 10:45:17 GMT</pubDate><category>Scattered Spider</category><category>Social Engineering</category><category>MFA Bypass</category><category>Ransomware</category><category>Cybercrime</category><category>Extradition</category><category>UNC3944</category><category>0ktapus</category></item><item><title>Scattered Spider Members Plead Guilty to Transport for London Attack</title><link>https://runtimerebel.com/blog/scattered-spider-members-plead-guilty-to-transport-for-london-attack</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-members-plead-guilty-to-transport-for-london-attack</guid><description>Two members of Scattered Spider pleaded guilty to the August 2024 Transport for London cyberattack, highlighting the group&apos;s social engineering efficacy.</description><pubDate>Wed, 24 Jun 2026 09:18:33 GMT</pubDate><category>Scattered Spider</category><category>Transport for London</category><category>Social Engineering</category><category>Octo Tempest</category></item><item><title>Scattered Spider Members Plead Guilty in TfL Infrastructure Attack</title><link>https://runtimerebel.com/blog/scattered-spider-members-plead-guilty-in-tfl-infrastructure-attack</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-members-plead-guilty-in-tfl-infrastructure-attack</guid><description>Two members of the Scattered Spider threat group plead guilty to the 2024 Transport for London hack, exposing risks of identity-based social engineering.</description><pubDate>Tue, 23 Jun 2026 16:54:58 GMT</pubDate><category>Scattered Spider</category><category>UNC3944</category><category>Transport for London</category><category>Social Engineering</category><category>Cybercrime</category></item><item><title>The Com: Analyzing the Intersection of Cybercrime and Physical Violence</title><link>https://runtimerebel.com/blog/the-com-analyzing-the-intersection-of-cybercrime-and-physical-violence</link><guid isPermaLink="true">https://runtimerebel.com/blog/the-com-analyzing-the-intersection-of-cybercrime-and-physical-violence</guid><description>Analysis of The Com, a criminal ecosystem using social engineering and SIM swapping to fund violent activities, sextortion, and neo-Nazi accelerationism.</description><pubDate>Fri, 29 May 2026 13:20:49 GMT</pubDate><category>The Com</category><category>Social Engineering</category><category>Scattered Spider</category><category>Extortion</category><category>Physical Security</category></item><item><title>Grafana Labs Breach: Coinbase Cartel Claims Data Theft — Analysis</title><link>https://runtimerebel.com/blog/grafana-labs-breach-coinbase-cartel-claims-data-theft-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/grafana-labs-breach-coinbase-cartel-claims-data-theft-analysis</guid><description>Grafana confirms a security breach after the Coinbase Cartel group claimed to have stolen sensitive data, including customer and infrastructure information.</description><pubDate>Mon, 18 May 2026 09:20:43 GMT</pubDate><category>Grafana</category><category>Coinbase Cartel</category><category>Data Breach</category><category>Threat Intel</category><category>Scattered Spider</category></item><item><title>Scattered Spider Arrest and NSA Emissary CVE-2024-34543 Analysis</title><link>https://runtimerebel.com/blog/scattered-spider-arrest-and-nsa-emissary-cve-2024-34543-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-arrest-and-nsa-emissary-cve-2024-34543-analysis</guid><description>Analysis of the Scattered Spider arrest, the NSA Emissary XXE vulnerability (CVE-2024-34543), and CISA&apos;s new Zero Trust guidance for OT environments.</description><pubDate>Fri, 01 May 2026 16:27:10 GMT</pubDate><category>Scattered Spider</category><category>CVE-2024-34543</category><category>NSA Emissary</category><category>Zero Trust</category><category>XXE</category></item><item><title>US Charges Scattered Spider Member Arrested in Finland</title><link>https://runtimerebel.com/blog/us-charges-scattered-spider-member-arrested-in-finland</link><guid isPermaLink="true">https://runtimerebel.com/blog/us-charges-scattered-spider-member-arrested-in-finland</guid><description>US federal authorities charge a 19-year-old member of the Scattered Spider hacking group, highlighting the group&apos;s social engineering and SIM swapping TTPs.</description><pubDate>Tue, 28 Apr 2026 16:42:10 GMT</pubDate><category>Scattered Spider</category><category>SIM Swapping</category><category>Noah Michael Urban</category><category>FBI</category><category>Ransomware Affiliate</category></item><item><title>Scattered Spider Member Tylerb Pleads Guilty: Smishing Analysis</title><link>https://runtimerebel.com/blog/scattered-spider-member-tylerb-pleads-guilty-smishing-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-member-tylerb-pleads-guilty-smishing-analysis</guid><description>Tyler Robert Buchanan&apos;s guilty plea exposes Scattered Spider smishing tactics that compromised 12+ tech firms and stole millions in cryptocurrency.</description><pubDate>Wed, 22 Apr 2026 05:02:36 GMT</pubDate><category>Scattered Spider</category><category>Smishing</category><category>Social Engineering</category><category>UNC3944</category><category>Tyler Buchanan</category></item><item><title>Scattered Spider Member Tyler Buchanan Pleads Guilty in US</title><link>https://runtimerebel.com/blog/scattered-spider-member-tyler-buchanan-pleads-guilty-in-us</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-member-tyler-buchanan-pleads-guilty-in-us</guid><description>Tyler Buchanan, a British national linked to the Scattered Spider cybercrime group, pleaded guilty in the US to charges of hacking, fraud, and cryptocurrency theft.</description><pubDate>Mon, 20 Apr 2026 16:34:10 GMT</pubDate><category>Scattered Spider</category><category>Tyler Buchanan</category><category>Cybercrime</category><category>Social Engineering</category><category>SIM Swapping</category><category>Fraud</category></item><item><title>Scattered Spider Arrest and ShowDoc Vulnerability Exploitation</title><link>https://runtimerebel.com/blog/scattered-spider-arrest-and-showdoc-vulnerability-exploitation</link><guid isPermaLink="true">https://runtimerebel.com/blog/scattered-spider-arrest-and-showdoc-vulnerability-exploitation</guid><description>Analysis of the arrest of a Scattered Spider member, active exploitation of ShowDoc vulnerabilities, and the introduction of the Satellite Cybersecurity Act.</description><pubDate>Fri, 17 Apr 2026 12:28:52 GMT</pubDate><category>Scattered Spider</category><category>ShowDoc</category><category>Rockstar Games</category><category>MGM Resorts</category><category>Satellite Security</category></item></channel></rss>