CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Your Cart
Added to Cart
There's nothing in your cart
per endpoint / per year
per endpoint / per month
Scion Spider
Discover the adversaries targeting your industry
Back to Adversary Universe
SCION SPIDER is a Ransomware-as-a-Service (RaaS) affiliate that achieves initial access by compromising servers running Microsoft SQL Server. The adversary typically leverages the built-in SQL extended procedure xp_cmdshell to run shell commands. SCION SPIDER uses either PowerShell (PS) commands directly or the Microsoft SQL Server-native sqlps utility to run PS commands for downloading payloads a...
-
Scion Spider
-
eCrime
Community Identifiers
Objective
Financial Gain
Motivation
Criminal
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
