Wandering Spider


WANDERING SPIDER—active since at least April 2020—is a prolific Big Game Hunting (BGH) adversary who has leveraged multiple ransomware families in their operations. WANDERING SPIDER has used Black Basta, DOPPEL SPIDER’s DoppelPaymer, PINCHY SPIDER’s REvil, ProLock, TWISTED SPIDER’s Egregor and Maze, and WIZARD SPIDER’s Conti. The adversary’s Tactics Techniques, and Procedures (TTPs) have been high...

Community Identifiers



  • CKkVZTlsRw1P9GW


  • lDhX6vgz

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.