UNIT 42 THREAT BRIEFING
A Deep Dive into Muddled Libra
Expert insights to identify and mitigate attacks from Muddled Libra.
Unit 42® has been tracking the prolific and sophisticated Muddled Libra adversary group since 2022, responding to dozens of high-profile incidents around the world. Most recently, this financially motivated threat actor has intensified its focus on compromising retail organizations.
Operating under aliases such as Scattered Spider, Muddled Libra is adept at SIM swapping, credential harvesting, data theft, extortion and ransomware, often partnering with groups like RansomHub. These actors possess advanced technical skills and social engineering expertise.
Watch our on-demand webinar to gain exclusive insights from Unit 42 into Muddled Libra’s operations and learn proactive strategies for protecting your organization against their increasingly aggressive attacks.
In this session, you’ll gain valuable knowledge on:
Operating under aliases such as Scattered Spider, Muddled Libra is adept at SIM swapping, credential harvesting, data theft, extortion and ransomware, often partnering with groups like RansomHub. These actors possess advanced technical skills and social engineering expertise.
Watch our on-demand webinar to gain exclusive insights from Unit 42 into Muddled Libra’s operations and learn proactive strategies for protecting your organization against their increasingly aggressive attacks.
In this session, you’ll gain valuable knowledge on:
- The techniques and tactics employed by Muddled Libra against retail organizations.
- Practical steps to fortify your retail business and beyond against their attacks.
- Customized cybersecurity best practices to enhance your security posture.
- Act now to equip your business against these adversaries.
Meet the Speakers
Clint Patterson
Consulting Director Unit 42
Kristopher Russo
Principal Threat Researcher Unit 42
Copyright © 2025 Palo Alto Networks. All rights reserved
