Brain Spider

Russian Federation


BRAIN SPIDER is a prolific threat actor with a history of being an access broker, an alleged former member of CARBON SPIDER, and a member of a ransomware-related negotiation service; the adversary is now operating as a manager of a ransomware affiliate team. BRAIN SPIDER has demonstrated the ability to lead and manage large teams (in excess of 20 members), coordinating the compromise of multiple v...

Community Identifiers



  • MqQVIgOGBpW8i7d


  • n7oSWyNG

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.