Hazard Spider


HAZARD SPIDER—active since at least October 2018—develops and sells the Amadey malware suite, which includes the Amadey Loader downloader, Amadey Stealer information stealer, and Amadey Clipper clipjacking module. HAZARD SPIDER currently uses a Russian underground criminal forum to advertise updates to the Amadey malware suite and receive customer feedback. The adversary requests that all potentia...

Community Identifiers



  • wBfJ4pFHX0dPruU


  • DeCr0NXi

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.