Aviator Spider

Nigeria

Details

AVIATOR SPIDER conducts high-volume opportunistic spam campaigns that primarily but not exclusively target aviation and aerospace sector entities. Since 2021, AVIATOR SPIDER has primarily used phishing emails containing links to crypters hosted on Google Drive. The adversary uses various crypters, either singly or in combination, including Fsociety, Roda Crypt, and ScrubCrypt. The crypters downloa...

Community Identifiers

vbHOJdmKqx73UFI

Objective

  • Vxpyze1nN0TkX4B

Motivation

  • mkK9wBuh

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.