GRIM SPIDER is a financially motivated cybercriminal group, operating as a distinct subgroup within the broader Russia-based WIZARD SPIDER enterprise, known for deploying the Ryuk ransomware since August 2018. This group specializes in 'big game hunting,' meticulously targeting large organizations with the capacity to pay substantial ransoms, a strategic shift from WIZARD SPIDER's earlier focus on wire fraud. While initially tracked as an independent entity, intelligence reporting in June 2019 indicated that Ryuk operations were integrated into the core WIZARD SPIDER group, leading to the deprecation of the GRIM SPIDER designation as a standalone actor by some security researchers. Their methodology is characterized by targeted, human-operated attacks rather than indiscriminate, automated campaigns, making them immediately distinguishable by their bespoke approach to high-value targets.

Aliases del actor

GOLD ULRICKOnslow o Dataresolutionfiguran TA542MealybugEmotetCriminalTA542otros

Actores similares

grim-spideractor · 1Scattered Spideractor · 2Indrik Spideractor · 1doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1