Curly Spider

Russian Federation

Details

CURLY SPIDER is an eCrime group who has conducted intrusions targeting predominantly North America- and Western Europe-based entities across various sectors. Analysis of leaked chat logs shows that CURLY SPIDER likely originated from MALLARD SPIDER, and likely operated as an initial access broker (IAB) and ransomware affiliate for WANDERING SPIDER before migrating to the Cactus ransomware group. C...

Community Identifiers

1YlHmxXQp30e2cj

Objective

  • KpTvW5tNsfRJV6F

Motivation

  • XTAgYa8P

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.