Plump Spider

PLUMP SPIDER is a Brazil-based eCrime adversary that has targeted Brazilian entities since at least September 2023. The adversary consistently targets financial institutions (FIs) and companies offering financial services, likely to gain access to internal payment systems and conduct fraudulent transactions. To gain initial access, PLUMP SPIDER conducts voice phishing (vishing) calls in which they...