Brain Spider

Russian Federation


BRAIN SPIDER is a prolific threat actor with a history of being an access broker, an alleged former member of CARBON SPIDER, and a member of a ransomware-related negotiation service; the adversary is now operating as a manager of a ransomware affiliate team predominantly deploying HIVE SPIDER’s Hive ransomware. Additional operations have likely involved use of AvosLocker, Conti, REvil, RansomCarte...

Community Identifiers



  • zWbfPI4lgpesq2u


  • hZk8nMa0

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.