Smoky Spider

Russian Federation


SMOKY SPIDER is the criminal actor behind the development of the criminal loader most commonly known as Smoke Bot (a.k.a. Smoke Loader and Dofoil). Smoke Bot has been available on underground forums since 2011, and has gone through various changes since. The loader is primarily used to download and execute modules sold by SMOKY SPIDER or third-party malware provided by the criminal operator. In ea...

Community Identifiers



  • kJMeFjy2DSOoCUA


  • pXv6TNVL

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.