Traveling Spider

Russian Federation

Details

TRAVELING SPIDER is the criminal developer and vendor of several ransomware variants, including Nemty, Nemty X (a.k.a. Nefilim), Karma, Nokoyawa, INC, and Lynx. With each new ransomware variant, TRAVELING SPIDER retires the previous variant. TRAVELING SPIDER openly advertised Nemty in an affiliate program on a Russian-language forum, using the monikers jsworm and jingo. However, in mid-April 2020,...

Community Identifiers

dv3FRKDHy6siqC5

Objective

  • QlifS4HJhUvP0or

Motivation

  • I2z1rgVb

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.