Aviator Spider

AVIATOR SPIDER conducts high-volume opportunistic spam campaigns that primarily but not exclusively target aviation and aerospace sector entities. Beginning in 2021, AVIATOR SPIDER began sending phishing emails containing links to crypters hosted on Google Drive. In early 2025, they shifted from Google Drive to Coudup as their preferred hosting provider. The adversary uses various crypters, either...