Recess Spider

RECESS SPIDER - publicly tracked as PLAY or PlayCrypt - is a Big Game Hunting (BGH) adversary who first emerged in June 2022. RECESS SPIDER develops and privately operates PLAY ransomware, which has impacted Windows, Linux, and ESXi environments. In addition to PLAY ransomware, the adversary’s custom tooling includes GRB_NET, used for discovery and defense evasion, and PsBulk, used for post-compro...