Curly Spider
Discover the adversaries targeting your industry
Back to Adversary Universe
CURLY SPIDER is an eCrime group who has conducted intrusions targeting predominantly North America- and Western Europe-based entities across various sectors. Analysis of leaked chat logs shows that CURLY SPIDER likely originated from MALLARD SPIDER, and likely operated as an initial access broker (IAB) and ransomware affiliate for WANDERING SPIDER before migrating to the Cactus ransomware group. C...
-
Curly Spider
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
Storm-1811
Objective
Financial Gain
Motivation
Criminal
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
