Aviator Spider

Nigeria

Details

AVIATOR SPIDER conducts high-volume opportunistic spam campaigns that primarily but not exclusively target aviation and aerospace sector entities. Since 2021, AVIATOR SPIDER has primarily used phishing emails containing links to crypters hosted on Google Drive. The adversary uses various crypters, either singly or in combination, including Fsociety, Roda Crypt, and ScrubCrypt. The crypters downloa...

Community Identifiers

XJGCE6mx7R1UZvF

Objective

  • nH3s1AvtTki4DWS

Motivation

  • UQ8urJP5

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.