Clockwork Spider

Russian Federation


CLOCKWORK SPIDER is a criminal group behind the core development and distribution of the commodity banking malware most commonly known as Retefe, which was first observed in late 2014. This adversary aims to conduct credential theft and wire fraud. Victims are widespread internationally but CLOCKWORK SPIDER specifically targets victims in certain countries, including Austria, Switzerland, Japan, t...

Community Identifiers



  • J8Bplo4O023NrzG


  • IdDkPohQ

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.