Scattered Spider Social Engineering

A Scattered Spider-attributed attacker successfully social-engineered a help desk agent into resetting MFA for a privileged user. The Identity Agent detected the anomalous authentication pattern within 200ms -- the user had never logged in from this geolocation or device fingerprint. The session was immediately sandboxed, and the attacker was presented with a convincing but isolated environment. All genuine administrative actions were blocked while the investigation proceeded.