You're listening to the CyberWire Network, powered by N2K.

When it comes to ensuring your company has top-notch security practices, things can get complicated fast.

Vanta automates compliance for SOC2, ISO 2701, HIPAA and more, saving you time and money.

With Vanta you can streamline security reviews by automating questionnaires and

demonstrating your security posture with a customer-facing trust center.

Over 7,000 global companies like Atlassian, Flow Health, and Quora use Vanta to manage risk and prove security

in real time.

Our listeners can claim a special offer of $1,000 off Vanta at vanta.com slash cyber.

That's VANTA.com slash cyber for $1,000 off Banta. Hello, Hello everyone and welcome to the CyberWire's Research Saturday.

I'm Dave Bitner and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

Thanks for joining us. So this came to the attention of a couple of our colleagues on our incident response

team and myself following an

I-R investigation that we were supporting. It was an attempted ransomware incident and in

the process there we uncovered a couple of artifacts that appeared to have been inadvertently left behind by the threat actor.

And from there we pivoted and we discovered some additional infrastructure that was

unrelated to that incident, but which we had really high confidence was a tribute. that was

attributed to the same actor.

That's Jason Baker, senior threat consultant at Guidepoint Security.

The research we're discussing today is titled Worldwide Web, an analysis of

tactics and techniques attributed to Scattered Spider. What we were able to do from there was sort of unpack a laundry list of

behavior and tools that the actor was using.

...