Recess Spider
Discover the adversaries targeting your industry
Back to Adversary Universe
RECESS SPIDER—publicly tracked as PLAY or PlayCrypt—is a Big Game Hunting (BGH) adversary who first emerged in June 2022. RECESS SPIDER develops and privately operates PLAY ransomware. In addition to PLAY ransomware, the adversary uses the custom discovery and defense evasion tool GRB_NET. RECESS SPIDER has also deployed a downloader currently tracked as FrostbiteLoader. RECESS SPIDER procures acc...
-
Recess Spider
-
eCrime
Community Identifiers
PlayCrypt, PLAY, Balloonfly
Objective
Financial Gain
Motivation
Criminal
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
