RU

CIRCUS SPIDERCIRCUS SPIDER

Also known as: CIRCUS SPIDER

Origin
RU
Known aliases
1

Profile

According to Crowdstrike, the NetWalker ransomware is being developed and maintained by a Russian-speaking actor designated as CIRCUS SPIDER. Initially discovered in September 2019and havinga compilation timestamp dating back to 28 August 2019, NetWalker has been found to be used in Big Game Hunting (BGH)-style operations while also being distributed via spam. CIRCUS SPIDER is advertising NetWalkeras being a closed-affiliate program,and verifies applicants before they are being accepted as an affiliate. The requirements rangefrom providing proof of previous revenue in similar affiliates programs, experience in the field and what type of industry the applicantis targeting.

Aliases· 1

CIRCUS SPIDER

References

  1. https://www.crowdstrike.com/blog/ransomware-preparedness-a-call-to-action/
  2. https://www.crowdstrike.com/blog/analysis-of-ecrime-menu-style-toolkits/
  3. https://go.crowdstrike.com/rs/281-OBQ-266/images/ReportCSIT-20081e.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
TRAVELING SPIDER
Actor
GURU SPIDER
Actor
WIZARD SPIDER
Actor
RATPAK SPIDER
Actor
GRIM SPIDER
Actor
Alpha Spider
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.