{"id":24664,"date":"2025-09-07T06:43:03","date_gmt":"2025-09-07T06:43:03","guid":{"rendered":"https:\/\/www.stroople.com\/?p=24664"},"modified":"2025-09-08T16:37:25","modified_gmt":"2025-09-08T16:37:25","slug":"araignee-dispersee-attaques-de-cybersecurite-exploitation-de-lidentite","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/scattered-spider-cybersecurity-attacks-identity-exploitation\/","title":{"rendered":"Scattered Spider : l\u2019art de manipuler le facteur humain \u00e0 l\u2019\u00e8re de l\u2019IDaaS"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"24664\" class=\"elementor elementor-24664\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-75a7e495 elementor-section-full_width elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"75a7e495\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-379ca332 syd-sticky-section-no\" data-id=\"379ca332\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c67689e syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"c67689e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3b2c3dd elementor-section-full_width elementor-section-height-min-height elementor-section-items-stretch elementor-reverse-tablet elementor-section-height-default syd-sticky-section-no\" data-id=\"3b2c3dd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-4002b263 syd-sticky-section-no\" data-id=\"4002b263\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4d0edb4 syd-sticky-section-no elementor-widget elementor-widget-ha-social-icons happy-addon ha-social-icons\" data-id=\"4d0edb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-social-icons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"ha-social-icons-wrapper\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/build-relation\/newsletter-follow?entityUrn=7120442855684231170\" class=\"ha-social-icon elementor-repeater-item-f2b3d32  elementor-social-icon-linkedin ha-social-icon--network\">\n\t\t\t\t\t<i class=\"fab fa-linkedin\"><\/i>\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7af1deef syd-sticky-section-no\" data-id=\"7af1deef\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1e11c0f0 syd-sticky-section-no elementor-widget elementor-widget-post-info\" data-id=\"1e11c0f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-5b276ce elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/2025\/09\/07\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>7 septembre 2025<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42127c4d syd-sticky-section-no elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"42127c4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Scattered Spider : l\u2019art de manipuler le facteur humain \u00e0 l\u2019\u00e8re de l\u2019IDaaS<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f87f821 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"f87f821\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0e53a75 syd-sticky-section-no\" data-id=\"0e53a75\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3deb2ab0 syd-sticky-section-no elementor-widget elementor-widget-theme-post-featured-image elementor-widget-image\" data-id=\"3deb2ab0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-featured-image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"2368\" height=\"1792\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg\" class=\"attachment-full size-full wp-image-24679\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg 2368w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-300x227.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-1024x775.jpg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-768x581.jpg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-1536x1162.jpg 1536w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-2048x1550.jpg 2048w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-16x12.jpg 16w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-1000x757.jpg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-230x174.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-350x265.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-480x363.jpg 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider-1320x999.jpg 1320w\" sizes=\"(max-width: 2368px) 100vw, 2368px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae97c8b syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"ae97c8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-064f662 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"064f662\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-496d655 syd-sticky-section-no\" data-id=\"496d655\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-15e5835 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"15e5835\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02b8cb4 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"02b8cb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"553\" data-end=\"672\">On parle souvent de \u00ab z\u00e9ro-day \u00bb. Scattered Spider, lui, a perfectionn\u00e9 le z\u00e9ro-doute. Plut\u00f4t que d\u2019attaquer vos firewalls, il appelle votre helpdesk. Plut\u00f4t que de d\u00e9velopper un rootkit in\u00e9dit, il envoie des vagues de notifications MFA jusqu\u2019\u00e0 l\u2019erreur. En trois ans \u00e0 peine, ce collectif aussi fuyant que prolifique a prouv\u00e9 qu\u2019un t\u00e9l\u00e9phone, un portail SSO clon\u00e9 et un script social convaincant suffisent \u00e0 faire plier des groupes du Fortune 500, jusqu\u2019\u00e0 paralyser des casinos, bousculer des retailers et d\u00e9sormais viser l\u2019aviation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-94434b5 syd-sticky-section-no\" data-id=\"94434b5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-04dc3a0 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"04dc3a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/elementor\/thumbs\/jj-ying-8bghKxNU1j0-unsplash-r7sd54d0e19mfxatlizo2qj13o8kinpqtfb4vtcf4w.jpg\" title=\"jj-ying-8bghKxNU1j0-unsplash\" alt=\"jj-ying-8bghKxNU1j0-unsplash\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8e67fb7 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"8e67fb7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d6117cb syd-sticky-section-no\" data-id=\"d6117cb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-10ca4bd syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"10ca4bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4>De l\u2019\u00ab Oktapus \u00bb au ran\u00e7onnage d\u2019infrastructures : gen\u00e8se d\u2019un pr\u00e9dateur<\/h4><p>Printemps 2022. Des hame\u00e7onnages cibl\u00e9s d\u2019employ\u00e9s Okta balaient les timelines des CERT : la campagne \u00ab Oktapus \u00bb installe le d\u00e9cor. Tr\u00e8s vite, les cibles s\u2019\u00e9largissent vers les op\u00e9rateurs t\u00e9l\u00e9coms et les BPO (Business Process Outsourcing), leviers id\u00e9aux pour court-circuiter l\u2019authentification et se glisser dans des \u00e9cosyst\u00e8mes entiers.<\/p><p>En 2023, le collectif bascule \u00e0 plein r\u00e9gime dans l\u2019extorsion et le Ransomware-as-a-Service, avec des \u00e9pisodes devenus cas d\u2019\u00e9cole : MGM Resorts et Caesars. Les chiffres parlent : MGM estimera l\u2019impact \u00e0 &gt;100 M$, Caesars paiera \u224815 M$ pour \u00e9touffer la divulgation.<\/p><p>2024 marque l\u2019entr\u00e9e fracassante dans le retail : Marks &amp; Spencer annoncera \u2248300 M\u00a3 d\u2019impact op\u00e9rationnel, un ordre de grandeur rarissime pour un acteur historique du secteur. Les arrestations de profils tr\u00e8s jeunes au Royaume-Uni et aux \u00c9tats-Unis n\u2019enrayeront pas la dynamique : Scattered Spider est une n\u00e9buleuse, pas une cellule unique.<\/p><h4>2025, le ciel s\u2019assombrit : pivot vers l\u2019aviation<\/h4><p>D\u00e9but \u00e9t\u00e9 2025, le FBI et plusieurs acteurs priv\u00e9s tirent la sonnette d\u2019alarme : le collectif pivote vers l\u2019aviation, un domaine o\u00f9 la continuit\u00e9 d\u2019activit\u00e9 est critique et les d\u00e9pendances tierces innombrables. Des incidents touchent WestJet (13 juin) et Hawaiian Airlines (fin juin) ; la presse sp\u00e9cialis\u00e9e et des intervenants sur incident y voient la patte de Scattered Spider, pendant que les compagnies g\u00e8rent encore la phase de rem\u00e9diation. Des signaux \u00e9mergent aussi autour de Qantas. Pour les SOC, le message est clair : menace trans-secteurs, capacit\u00e9 d\u2019apprentissage rapide et cha\u00eene d\u2019attaque qui esquive la t\u00e9l\u00e9m\u00e9trie endpoint lorsqu\u2019elle remonte jusqu\u2019aux hyperviseurs ESXi (logiciels VMware permettant de g\u00e9rer des machines virtuelles, dont la compromission offre un contr\u00f4le total sur les serveurs).<\/p><h4>L\u2019anatomie d\u2019une intrusion : le z\u00e9ro-doute avant le z\u00e9ro-day<\/h4><p>La phase d\u2019observation est m\u00e9thodique : organigrammes, conventions de nommage, proc\u00e9dures de support, empreintes SaaS, jusqu\u2019\u00e0 la pr\u00e9sence d\u2019un IdP (Okta\/Entra\/OneLogin). Le premier coup porte sur l\u2019identit\u00e9 : faux portails SSO au pixel pr\u00e8s, domaines typosquatt\u00e9s qui reprennent okta, sso, helpdesk, internal, coupl\u00e9s \u00e0 du smishing et du vishing fa\u00e7on \u00ab support IT \u00bb. L\u2019objectif : r\u00e9colter les identifiants et neutraliser le MFA par fatigue (push bombing), SIM-swap (d\u00e9tournement du num\u00e9ro de t\u00e9l\u00e9phone d\u2019une victime pour intercepter ses codes MFA), ou par ajout d\u2019un nouvel appareil MFA via un helpdesk abus\u00e9.<\/p><p>Une fois dedans, le groupe vit de l\u2019environnement : RMM l\u00e9gitimes (Remote Monitoring &amp; Management \u2013 outils comme AnyDesk, TeamViewer, ScreenConnect utilis\u00e9s pour administrer les machines \u00e0 distance) pour la persistance invisible, commandes RDP\/SSH\/PsExec (RDP : Remote Desktop Protocol, SSH : Secure Shell, PsExec : ex\u00e9cution de commandes \u00e0 distance pour Windows) pour la lat\u00e9ralisation, Mimikatz\/LSASS\/DCSync (Mimikatz : outil pour extraire mots de passe et jetons ; LSASS : processus Windows stockant les identifiants ; DCSync : technique permettant d\u2019imiter un contr\u00f4leur AD pour aspirer tous les mots de passe) pour l\u2019ascension vers Active Directory.<\/p><p>Les campagnes les plus redout\u00e9es sautent ensuite vers vCenter\/VCSA (console VMware pour g\u00e9rer les hyperviseurs et machines virtuelles), et ESXi, o\u00f9 le chiffrement \u00ab au niveau hyperviseur \u00bb et le sabotage des sauvegardes doublent l\u2019effet de levier : peu d\u2019IoC endpoint, beaucoup d\u2019impact.<\/p><h4>Au-del\u00e0 de l\u2019exploit, l\u2019\u00e9conomie de l\u2019extorsion<\/h4><p>L\u2019outil final importe moins que le th\u00e9\u00e2tre. Selon les opportunit\u00e9s, Scattered Spider affilie ses intrusions \u00e0 des franchises RaaS \u2014 ALPHV\/BlackCat, RansomHub, Qilin\/DragonForce \u2014 et orchestre la double extorsion : chiffrement + menace de divulgation. Dans plusieurs cas, le collectif instrumentalise l\u2019opinion via Telegram\/Discord pour amplifier la pression r\u00e9putationnelle. En 2025, des recoupements m\u00e9diatiques \u00e9voquent des proximit\u00e9s avec LAPSUS$ ou ShinyHunters ; l\u2019essentiel pour un RSSI n\u2019est pas l\u2019\u00e9tiquette, mais la constante : mon\u00e9tiser l\u2019identit\u00e9 compromise.<\/p><p>\u00c0 la mi-2025, de nombreux rapports de renseignement ont mis en \u00e9vidence des connexions possibles avec LAPSUS$ et ShinyHunters. Pour les RSSI et les \u00e9quipes CTI, ce n'est pas l'\u00e9tiquette qui importe, mais la constante : la mon\u00e9tisation des identit\u00e9s compromises \u00e0 grande \u00e9chelle.<\/p><h4>Pourquoi ils gagnent : process contre process<\/h4><p>La sup\u00e9riorit\u00e9 de Scattered Spider ne tient pas \u00e0 des 0-day exotiques, mais \u00e0 une connaissance chirurgicale de vos propres processus : comment un agent du helpdesk valide un reset, qui peut ajouter un device MFA, quelles exceptions sont tol\u00e9r\u00e9es \u00ab pour r\u00e9tablir le service \u00bb.<\/p><p>Le collectif transforme chaque tol\u00e9rance op\u00e9rationnelle en vecteur d\u2019intrusion. Quand l\u2019EDR couvre parfaitement les postes, il d\u00e9porte la bataille au-dessus du noyau : drivers vuln\u00e9rables (BYOVD), hyperviseurs, IdP cloud et cha\u00eenes de sauvegardes. L\u2019adversaire ne cherche pas la porte d\u00e9rob\u00e9e, il devient l\u2019op\u00e9rateur que vos proc\u00e9dures attendent.<\/p><h4>Le co\u00fbt r\u00e9el : des chiffres, mais surtout des jours perdus<\/h4><p>MGM et Caesars ont servi d\u2019\u00e9lectrochoc c\u00f4t\u00e9 h\u00f4tellerie-loisirs. En 2025, Marks &amp; Spencer publie une estimation \u2248300 M\u00a3 d\u2019impact sur le r\u00e9sultat op\u00e9rationnel ; quinze semaines auront \u00e9t\u00e9 n\u00e9cessaires pour restaurer certains services \u00ab click-and-collect \u00bb.<br \/>Dans l\u2019aviation, m\u00eame sans chute d\u2019avions, chaque heure d\u2019indisponibilit\u00e9 d\u00e9structure l\u2019exploitation, contamine la relation client et accro\u00eet la pression \u00e0 payer. Dans tous les cas, c\u2019est la dur\u00e9e \u2014 pas seulement la ran\u00e7on \u2014 qui saigne.<\/p><h4>Passer \u00e0 l\u2019offensive d\u00e9fensive : trois chantiers en 90 jours<\/h4><p><strong>Identit\u00e9 &amp; helpdesk.<\/strong> Reprendre le contr\u00f4le des changements sensibles : aucun ajout d\u2019appareil MFA ni reset d\u2019un compte \u00e0 privil\u00e8ge sans double validation hors bande et preuve de possession forte. Bannir autant que possible SMS OTP au profit de FIDO2\/WebAuthn et number-matching. Outiller le SOC pour surveiller les \u00e9v\u00e9nements IdP (enr\u00f4lement MFA, ajout d\u2019IdP tiers, \u00e9checs MFA en rafale) et croiser ces signaux avec les tickets helpdesk pour d\u00e9tecter l\u2019usurpation \"processuelle\".<\/p><p><strong>AD \u2192 vSphere Segregation.<\/strong> D\u00e9corr\u00e9ler ESXi d\u2019Active Directory chaque fois que possible ; \u00e0 d\u00e9faut, comptes d\u00e9di\u00e9s, r\u00f4les minimaux, MFA au login vCenter, SSH off par d\u00e9faut, bastion et allow-list r\u00e9seau. Centraliser la journalisation vCenter\/VCSA\/ESXi dans le SIEM et corr\u00e9ler les s\u00e9quences \u00ab reset MFA \u2192 login vCenter \u2192 snapshots supprim\u00e9s \u2192 pics d\u2019I\/O \u00bb pour d\u00e9tecter les cha\u00eenes d\u2019attaque avant l\u2019impact maximal. Tester la restauration hors bande depuis des sauvegardes immuables.<\/p><p><strong>RMM &amp; mouvements lat\u00e9raux.<\/strong> Formaliser une politique d\u2019outillage \u00e0 distance : quelles solutions, quels usages, quelles traces, jamais d\u2019acc\u00e8s \u00ab unattended \u00bb hors IT. Enrichir la t\u00e9l\u00e9m\u00e9trie EDR\/NDR pour rep\u00e9rer le RDP hors plage, PsExec hors norme, et les tunnels ad hoc (Chisel\/Plink). D\u00e9ployer des canaris d\u2019identifiants et tokens de partage pour acc\u00e9l\u00e9rer la d\u00e9tection de l\u2019exfiltration.<\/p><h4>Pour les CTI : traquer le label\u2026 sans s\u2019y enfermer<\/h4><p>La CTI utile ne s\u2019arr\u00eate pas au nom Scattered Spider. Conservez des watchlists dynamiques sur les patterns DNS\/HTTP autour de okta, sso, help, internal, corp et d\u00e9riv\u00e9s (\u00ab he1p \u00bb, servicedesk, work, vpn), enrichies par les IoC de campagnes r\u00e9centes ; suivez les \u00e9volutions sur les kits de phishing et les infrastructures publi\u00e9es par la recherche (Check Point, Mandiant). Corr\u00e9lez avec les tentatives d\u2019enr\u00f4lement MFA et les cr\u00e9ations d\u2019IdP f\u00e9d\u00e9r\u00e9s dans vos tenants cloud. Autrement dit, traquez la technique, pas l\u2019avatar.<br \/>En bref : les failles humaines exigent une r\u00e9ponse organisationnelle.<\/p><h4>Un adversaire qui exploite les failles de vos processus n\u00e9cessite une d\u00e9fense ax\u00e9e sur les processus.<\/h4><p>Scattered Spider a d\u00e9montr\u00e9 qu\u2019un adversaire processuel battra toujours une d\u00e9fense strictement technique. Si vos \u00e9quipes durcissent l\u2019EDR mais laissent une faille dans la v\u00e9rification helpdesk, l\u2019attaquant choisira la voie humaine.<\/p><p>La r\u00e9ponse est connue mais exigeante : MFA r\u00e9sistante au phishing, garde-fous formalis\u00e9s sur le support, corr\u00e9lations inter-plans (IdP, AD, hyperviseur, sauvegardes) et exercices de crise qui jouent le vrai sc\u00e9nario : de l\u2019appel usurp\u00e9 jusqu\u2019au chiffrement depuis ESXi.<\/p><p>Vous ne d\u00e9jouerez pas chaque ruse, mais vous r\u00e9duirez l\u2019angle mort qui transforme une intrusion en catastrophe.<\/p><p class=\"whitespace-break-spaces\" dir=\"auto\"><strong>Sources :<\/strong><\/p><ul><li>Varonis - <a class=\"\" href=\"https:\/\/www.varonis.com\/blog\/scattered-spider\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Scattered Spider : Ce qu'il faut savoir\"<\/a><\/li><li>CISA\/IC3 - <a class=\"\" href=\"https:\/\/www.ic3.gov\/CSA\/2025\/250729.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Scattered Spider\" (cartographie MITRE, 29 juillet 2025, PDF)<\/a><\/li><li>Check Point Research - <a class=\"\" href=\"https:\/\/blog.checkpoint.com\/research\/exposing-scattered-spider-new-indicators-highlight-growing-threat-to-enterprises-and-aviation\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Exposer l'araign\u00e9e dispers\u00e9e : Nouveaux indicateurs...\" (juillet 2025)<\/a><\/li><li>Mandiant\/Google Cloud - <a class=\"\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/defending-vsphere-from-unc3944\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"D\u00e9fendre votre patrimoine VMware vSphere contre l'UNC3944\" (23 juillet 2025)<\/a><\/li><li>Reuters - <a class=\"\" href=\"https:\/\/www.reuters.com\/business\/retail-consumer\/britains-ms-restores-click-collect-services-15-weeks-after-systems-hacked-2025-08-11\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Estimation des co\u00fbts des cyberattaques M&amp;S (11\/20 ao\u00fbt 2025)<\/a><\/li><li>SecurityWeek - <a class=\"\" href=\"https:\/\/www.securityweek.com\/canadian-airline-westjet-hit-by-cyberattack\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Cyberattaque de WestJet\" (16 juin 2025)<\/a><\/li><li>The Record - <a class=\"\" href=\"https:\/\/therecord.media\/hawaiian-airlines-cyberattack-flights-safe\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"Hawaiian Airlines Cyberattack\" (27 juin 2025)<\/a><\/li><li>CrowdStrike - <a class=\"\" href=\"https:\/\/www.crowdstrike.com\/en-us\/blog\/scattered-spider-attempts-to-avoid-detection-with-bring-your-own-vulnerable-driver-tactic\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer external\">\"SCATTERED SPIDER et BYOVD\" (10 janvier 2023)<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0d45597 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"0d45597\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-42f879c9 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"42f879c9\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-2c8bfc12 syd-sticky-section-no\" data-id=\"2c8bfc12\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6919a471 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6919a471\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Partager :<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-7f905bc1 syd-sticky-section-no\" data-id=\"7f905bc1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28b6f900 elementor-share-buttons--skin-flat elementor-share-buttons--view-icon-text elementor-share-buttons--shape-square elementor-grid-0 elementor-share-buttons--color-official syd-sticky-section-no elementor-widget elementor-widget-share-buttons\" data-id=\"28b6f900\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;share_url&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;,&quot;custom_attributes&quot;:&quot;&quot;}}\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_x-twitter\" role=\"button\" tabindex=\"0\" aria-label=\"Partager sur x-twitter\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-x-twitter\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tX\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" role=\"button\" tabindex=\"0\" aria-label=\"Partager sur linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tLinkedIn\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cf1fb15 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"cf1fb15\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-12d5d76 syd-sticky-section-no\" data-id=\"12d5d76\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e19b717 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"e19b717\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-eef88fd elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"eef88fd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-c0ccf91 syd-sticky-section-no\" data-id=\"c0ccf91\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/audit\\\/&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-element elementor-element-3419c3a elementor-widget__width-initial syd-sticky-section-no elementor-widget elementor-widget-ha-image-hover-effect happy-addon ha-image-hover-effect\" data-id=\"3419c3a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-image-hover-effect.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"ha-ihe-wrapper grid\">\n\t\t\t<figure class=\"ha-ihe-fig ha-effect-apollo\">\n\t\t\t\t<img decoding=\"async\" class=\"ha-ihe-img\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/08\/rostislav-uzunov-3G03lBTzjA8-unsplash.jpg\" alt=\"Effet de survol de l&#039;image\" \/>\n\t\t\t\t<figcaption class=\"ha-ihe-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<h2 class=\"ha-ihe-title\">Audit et surveillance de la surface d'attaque externe<\/h2>\t\t\t\t\t\t\t\t\t\t\t\t\t<p class=\"ha-ihe-desc\">\nVotre cybers\u00e9curit\u00e9 vue par les pirates.<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/audit\/\"  target=\"&quot;_blank&quot;\" rel=\"&quot;nofollow&quot;\"><\/a>\n\t\t\t\t\t\t\t\t\t<\/figcaption>\n\t\t\t<\/figure>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-33ef498 syd-sticky-section-no\" data-id=\"33ef498\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/audit\\\/&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-element elementor-element-70e6ede syd-sticky-section-no elementor-widget elementor-widget-counter\" data-id=\"70e6ede\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"counter.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-counter\">\n\t\t\t\t\t\t<div class=\"elementor-counter-number-wrapper\">\n\t\t\t\t<span class=\"elementor-counter-number-prefix\"><\/span>\n\t\t\t\t<span class=\"elementor-counter-number\" data-duration=\"2000\" data-to-value=\"75\" data-from-value=\"0\" data-delimiter=\",\">0<\/span>\n\t\t\t\t<span class=\"elementor-counter-number-suffix\">%<\/span>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08910c5 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"08910c5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>des violations de donn\u00e9es r\u00e9ussies d\u00e9butent sur des actifs expos\u00e9s sur Internet.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7652aef elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"7652aef\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ed0df97 syd-sticky-section-no\" data-id=\"ed0df97\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-14be053 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"14be053\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5e63e1f elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"5e63e1f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6502000 syd-sticky-section-no\" data-id=\"6502000\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67d7aa6 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"67d7aa6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2655d51e elementor-widget-divider--view-line_text elementor-widget-divider--element-align-right syd-sticky-section-no elementor-widget elementor-widget-divider\" data-id=\"2655d51e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t\t<span class=\"elementor-divider__text elementor-divider__element\">\n\t\t\t\tGRC\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bb6bd8c syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6bb6bd8c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Articles connexes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7aa4a5bf elementor-grid-3 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-posts--thumbnail-top syd-sticky-section-no elementor-widget elementor-widget-posts\" data-id=\"7aa4a5bf\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;classic_columns&quot;:&quot;3&quot;,&quot;classic_columns_tablet&quot;:&quot;2&quot;,&quot;classic_columns_mobile&quot;:&quot;1&quot;,&quot;classic_row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:35,&quot;sizes&quot;:[]},&quot;classic_row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;classic_row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"posts.classic\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-posts-container elementor-posts elementor-posts--skin-classic elementor-grid\" role=\"list\">\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-29199 post type-post status-publish format-standard has-post-thumbnail hentry category-governance-risk-compliance-cybersecurity tag-nis2\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/nis2-minimum-baseline\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img decoding=\"async\" width=\"640\" height=\"427\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition.jpg\" class=\"attachment-full size-full wp-image-29201\" alt=\"Assembl\u00e9e nationale fran\u00e7aise, transposition de la directive NIS2 en attente d&#039;examen parlementaire\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition-300x200.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition-350x234.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/08\/french-national-assembly-nis2-transposition-480x320.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/nis2-minimum-baseline\/\" >\n\t\t\t\tEt si la directive NIS2 ne constituait d\u00e9j\u00e0 qu'un socle minimal ?\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-25715 post type-post status-publish format-standard has-post-thumbnail hentry category-governance-risk-compliance-cybersecurity\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/strategic-library-for-ciso\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img decoding=\"async\" width=\"640\" height=\"427\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash.jpg\" class=\"attachment-full size-full wp-image-25718\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash-300x200.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash-350x234.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/giammarco-boscaro-zeH-ljawHtg-unsplash-480x320.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/strategic-library-for-ciso\/\" >\n\t\t\t\tLa biblioth\u00e8que strat\u00e9gique du RSSI - 12 livres essentiels\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-24977 post type-post status-publish format-standard has-post-thumbnail hentry category-governance-risk-compliance-cybersecurity\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/www.stroople.com\/fr\/cybersecurity-myths-cyber-pantheon\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"425\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash.jpg\" class=\"attachment-full size-full wp-image-24979\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash-300x199.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash-350x232.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/10\/raja-v-Orec8tmEwYM-unsplash-480x319.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h3 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/cybersecurity-myths-cyber-pantheon\/\" >\n\t\t\t\tLes dieux du cyber-panth\u00e9on : Mythes modernes et ch\u00e2timents num\u00e9riques\t\t\t<\/a>\n\t\t<\/h3>\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-014cc98 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"014cc98\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-05bcd78 syd-sticky-section-no\" data-id=\"05bcd78\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>On parle souvent de \"jour z\u00e9ro\". Scattered Spider, cependant, a perfectionn\u00e9 le z\u00e9ro-doute. Au lieu d'attaquer vos pare-feu, ils appellent votre service d'assistance. Au lieu de<\/p>","protected":false},"author":1,"featured_media":24679,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114],"tags":[],"class_list":["post-24664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-operations-soc-detection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Scattered Spider: Mastering Human Exploitation in the Age of IDaaS - Stroople<\/title>\n<meta name=\"description\" content=\"Discover how Scattered Spider cybersecurity attacks on identity systems exploit social engineering, SIM-swapping, and MFA bypass to infiltrate Fortune 500 companies and aviation networks. Learn their tactics and defense strategies used by SOC and CTI teams.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/araignee-dispersee-attaques-de-cybersecurite-exploitation-de-lidentite\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS - Stroople\" \/>\n<meta property=\"og:description\" content=\"Discover how Scattered Spider cybersecurity attacks on identity systems exploit social engineering, SIM-swapping, and MFA bypass to infiltrate Fortune 500 companies and aviation networks. Learn their tactics and defense strategies used by SOC and CTI teams.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/araignee-dispersee-attaques-de-cybersecurite-exploitation-de-lidentite\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-07T06:43:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-08T16:37:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2368\" \/>\n\t<meta property=\"og:image:height\" content=\"1792\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS\",\"datePublished\":\"2025-09-07T06:43:03+00:00\",\"dateModified\":\"2025-09-08T16:37:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/\"},\"wordCount\":1311,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/Scattered-Spider.jpg\",\"articleSection\":[\"SecOps\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/\",\"name\":\"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/Scattered-Spider.jpg\",\"datePublished\":\"2025-09-07T06:43:03+00:00\",\"dateModified\":\"2025-09-08T16:37:25+00:00\",\"description\":\"Discover how Scattered Spider cybersecurity attacks on identity systems exploit social engineering, SIM-swapping, and MFA bypass to infiltrate Fortune 500 companies and aviation networks. Learn their tactics and defense strategies used by SOC and CTI teams.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/Scattered-Spider.jpg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2025\\\/09\\\/Scattered-Spider.jpg\",\"width\":2368,\"height\":1792},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/scattered-spider-cybersecurity-attacks-identity-exploitation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"L'araign\u00e9e dispers\u00e9e : Ma\u00eetriser l'exploitation humaine \u00e0 l'\u00e8re de l'IDaaS - Stroople","description":"D\u00e9couvrez comment les attaques de cybers\u00e9curit\u00e9 de Scattered Spider sur les syst\u00e8mes d'identit\u00e9 exploitent l'ing\u00e9nierie sociale, l'\u00e9change de cartes SIM et le contournement du MFA pour infiltrer les entreprises du Fortune 500 et les r\u00e9seaux d'aviation. Apprenez leurs tactiques et strat\u00e9gies de d\u00e9fense utilis\u00e9es par les \u00e9quipes SOC et CTI.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/araignee-dispersee-attaques-de-cybersecurite-exploitation-de-lidentite\/","og_locale":"fr_FR","og_type":"article","og_title":"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS - Stroople","og_description":"Discover how Scattered Spider cybersecurity attacks on identity systems exploit social engineering, SIM-swapping, and MFA bypass to infiltrate Fortune 500 companies and aviation networks. Learn their tactics and defense strategies used by SOC and CTI teams.","og_url":"https:\/\/www.stroople.com\/fr\/araignee-dispersee-attaques-de-cybersecurite-exploitation-de-lidentite\/","og_site_name":"Stroople","article_published_time":"2025-09-07T06:43:03+00:00","article_modified_time":"2025-09-08T16:37:25+00:00","og_image":[{"width":2368,"height":1792,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS","datePublished":"2025-09-07T06:43:03+00:00","dateModified":"2025-09-08T16:37:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/"},"wordCount":1311,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg","articleSection":["SecOps"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/","url":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/","name":"L'araign\u00e9e dispers\u00e9e : Ma\u00eetriser l'exploitation humaine \u00e0 l'\u00e8re de l'IDaaS - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg","datePublished":"2025-09-07T06:43:03+00:00","dateModified":"2025-09-08T16:37:25+00:00","description":"D\u00e9couvrez comment les attaques de cybers\u00e9curit\u00e9 de Scattered Spider sur les syst\u00e8mes d'identit\u00e9 exploitent l'ing\u00e9nierie sociale, l'\u00e9change de cartes SIM et le contournement du MFA pour infiltrer les entreprises du Fortune 500 et les r\u00e9seaux d'aviation. Apprenez leurs tactiques et strat\u00e9gies de d\u00e9fense utilis\u00e9es par les \u00e9quipes SOC et CTI.","breadcrumb":{"@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/09\/Scattered-Spider.jpg","width":2368,"height":1792},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/scattered-spider-cybersecurity-attacks-identity-exploitation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"Scattered Spider: Mastering Human Exploitation in the Age of IDaaS"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/24664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=24664"}],"version-history":[{"count":0,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/24664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/24679"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=24664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=24664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=24664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}