Muddled Libra

Actor Type Criminal Group
Directly Linked Intrusion Sets Scattered Spider

Muddled Libra is an intrusion set tracked by researchers at Palo Alto who describe the group as 'the intersection of devious social engineering and nimble technology adaptation.'

The intrusion set are known for effective use of social engineering against IT help support desks in order to gain access to accounts and bypass multi-factor authentication. Having initially focused on large business outsourcing companies, the group has subsequently been observed operating as an affiliate to the ALPHV BlackCat ransomware operation.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

Muddled Libra Threat Reports

Report

Muddled Libra’s Evolution to the Cloud

Researchers at Unit 42 report on evolution of the Muddled Libra group as the target SaaS (software-as-a-service) applications and CSP (cloud ...

References