Threat Actor
0ktapus
- First Reported
- Jan 16, 2024
- Latest Reported
- Jun 18, 2025
Reported Context (3)
- Used spoofed SSO portals to harvest credentials. Wiz Report Highlights Familiar Entry Points in Cloud Attacks
- Financially motivated threat actor active since 2022; the article explicitly identifies the other listed names as aliases. Wiz Details Methods for Finding 0ktapus Phishing Domains
- Explicitly identified as another name for Scattered-Spider. Wiz Recaps Its 2023 Cloud Security Stories and Key Lessons
CVE (9)
Malware (1)
People (5)
Threat Actors (12)
MITRE ATT&CK (10)
Vendors (5)
Products (16)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.