Prophet SpiderProphet Spider

Also known as: GOLD MELODY · UNC961 · Prophet Spider

Known aliases
3

Profile

PROPHET SPIDER is an eCrime actor, active since at least May 2017, that primarily gains access to victims by compromising vulnerable web servers, which commonly involves leveraging a variety of publicly disclosed vulnerabilities. The adversary has likely functioned as an access broker — handing off access to a third party to deploy ransomware — in multiple instances.

Aliases· 3

GOLD MELODYUNC961Prophet Spider

References

  1. https://www.crowdstrike.com/blog/prophet-spider-exploits-oracle-weblogic-to-facilitate-ransomware-activity/
  2. https://www.crowdstrike.com/blog/prophet-spider-exploits-citrix-sharefile/
  3. https://www.secureworks.com/research/gold-melody-profile-of-an-initial-access-broker
  4. https://www.mandiant.com/resources/blog/unc961-multiverse-financially-motivated

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
GURU SPIDER
Actor
Alpha Spider
Actor
LUNAR SPIDER
Actor
Scattered Spider
Actor
SALTY SPIDER
Actor
UNION SPIDER
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.