Chatty Spider

CHATTY SPIDER is a likely Russia-based eCrime adversary who has conducted low-volume data theft and extortion campaigns since early 2022. The adversary leverages callback phishing to gain initial access to victim systems. In these campaigns, the adversary sends an initial phishing email with a PDF attachment lure relating to a fake purchase order; the email instructs targeted users to call a provi...