Compass Spider


COMPASS SPIDER is an access broker likely located in Eastern Ukraine or Russia who uses the monikers EronM, StreetSkip, Viking, Network, farnetwork, farcat, alfredoaa, and IlonMask. The criminal actor sells access to entities across sectors located worldwide. COMPASS SPIDER posted access advertisements in multiple underground forums as early as September 2020. Since at least April 2021, the advers...

Community Identifiers



  • Ot30rEP1HU8IFx2


  • BT0c7eWk

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.