NARWHAL SPIDERNARWHAL SPIDER

Also known as: GOLD ESSEX · TA544 · Storm-0302 · NARWHAL SPIDER

Known aliases
4

Profile

NARWHAL SPIDER is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as GOLD ESSEX, TA544, Storm-0302. Original record: NARWHAL SPIDER’s operation of Cutwail v2 was limited to country-specific spam campaigns, although late in 2019 there appeared to be an effort to expand by bringing in INDRIK SPIDER as a customer.

Aliases· 4

GOLD ESSEXTA544Storm-0302NARWHAL SPIDER

References

  1. https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf
  2. http://www.secureworks.com/research/threat-profiles/gold-essex
  3. https://www.proofpoint.com/us/threat-insight/post/brushaloader-still-sweeping-victims-one-year-later
  4. https://www.proofpoint.com/us/threat-insight/post/holiday-lull-not-so-much
  5. https://www.proofpoint.com/us/threat-insight/post/urlzone-top-malware-japan-while-emotet-and-line-phishing-round-out-landscape-0
  6. https://www.proofpoint.com/us/threat-insight/post/threat-actor-profile-ta544-targets-geographies-italy-japan-range-malware
  7. https://www.proofpoint.com/us/blog/threat-insight/q4-2020-threat-report-quarterly-analysis-cybersecurity-trends-tactics-and-themes

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
MALLARD SPIDER
Actor
NOCTURNAL SPIDER
Actor
GURU SPIDER
Actor
LUNAR SPIDER
Actor
SALTY SPIDER
Actor
MIMIC SPIDER
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.