Graceful Spider
Discover the adversaries targeting your industry
Back to Adversary Universe
GRACEFUL SPIDER is a financially-motivated eCrime group that used the CIop ransomware (spelled with an uppercase 'i'), which is a variant of the Clop ransomware (spelled with a lowercase 'l'). The adversary has published victim data from ransom campaigns to the "Clop Leaks" site. However, GRACEFUL SPIDER has not deployed Clop ransomware since late 2022 and instead has relied on data-theft and exto...
-
Graceful Spider
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
CL0p, Snakefly, FIN11, Clop, Cl0p
Objective
Financial Gain
Motivation
Criminal
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.