Recess Spider


RECESS SPIDER—publicly tracked as PLAY or PlayCrypt—is a Big Game Hunting (BGH) adversary who first emerged in June 2022. RECESS SPIDER develops and privately operates PLAY ransomware. In addition to PLAY ransomware, the adversary uses the custom discovery and defense evasion tool GRB_NET.   RECESS SPIDER has continuously evolved their Tactics, Techniques, and Procedures (TTPs) since their discove...

Community Identifiers



  • OyTiukLsGDSgmaN


  • 7H3JQKLp

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.