Muddled Libra’s Strike Teams: Amalgamated Evil
Summary: Unit 42 describes Muddled Libra, also called Scattered Spider or Octo Tempest, not as a structured group but as a loose collaboration of cybercriminal personas connected through social chat applications who converge into strike teams with their own skillsets and objectives. Since late 2022, Unit 42 has tracked at least seven distinct teams, with personas moving between them and early teams focused on cryptocurrency theft while others shifted to less complex, higher-volume objectives.
Why it matters: The same personas who hunted cryptocurrency "whales" have expanded into a breadth of industries Unit 42 calls staggering, and the group's fluidity makes predicting the next target a fool's errand - so the question is what data or access you hold that a strike team would want, and whether it is classified, segmented and protected accordingly.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026