LUCR-3: SCATTERED SPIDER GETTING SAAS-Y IN THE CLOUD

Summary from the TLDR InfoSec newsletter

This blog post dives into the group LUCR-3. LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875. It is a financially motivated attacker that leverages the Identity Provider (IDP) as initial access into an environment with the goal of stealing intellectual property for extortion. LUCR-3 targets Fortune 2000 companies across various sectors, including but not limited to software, retail, hospitality, manufacturing, and telecom.