Narwhal Spider

Russian Federation


NARWHAL SPIDER is the criminal actor who develops and operates Cutwail version 2 (v2). Cutwail is a spam engine that is delivered to infected machines through the Pushdo loader—it first came onto the criminal market in 2007, and has survived several takedown operations. Cutwail v2 is known in the Russian underground forum community as 0bulk Psych Evolution R4. Following a separation of the origina...

Community Identifiers



  • va5IrOcguEZRP1J


  • NBuGZoKD

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.