Narwhal Spider

Russian Federation


NARWHAL SPIDER is the criminal actor who developed and operated Cutwail version 2 (v2). Cutwail is a spam engine that is delivered to infected machines through the Pushdo loader—it first came onto the criminal market in 2007, and has survived several takedown operations. Cutwail v2 is known in the Russian underground forum community as 0bulk Psych Evolution R4. Following a separation of the origin...

Community Identifiers



  • LQOzJMYfsbU9rET


  • xa2FMij7

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.