CIRCUS SPIDER
CIRCUS SPIDER is classified as cybercrime.
- Type
- Cybercrime
- Origin
- Russia
According to Crowdstrike, the NetWalker ransomware is being developed and maintained by a Russian-speaking actor designated as CIRCUS SPIDER. Initially discovered in September 2019and havinga compilation timestamp dating back to 28 August 2019, NetWalker has been found to be used in Big Game Hunting (BGH)-style operations while also being distributed via spam. CIRCUS SPIDER is advertising NetWalkeras being a closed-affiliate program,and verifies applicants before they are being accepted as an affiliate. The requirements rangefrom providing proof of previous revenue in similar affiliates programs, experience in the field and what type of industry the applicantis targeting.
The group's reported origin is Russia.
Published reports on this actor:
- https://www.crowdstrike.com/blog/ransomware-preparedness-a-call-to-action/
- https://www.crowdstrike.com/blog/analysis-of-ecrime-menu-style-toolkits/
- https://go.crowdstrike.com/rs/281-OBQ-266/images/ReportCSIT-20081e.pdf
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.