APT Explorer

All actors

CIRCUS SPIDER

Also reported as Circus Spider. Linked to Russia by two sources.

Reports
6
Last reported
Known CVEs
5
Origin
Russia
ID
circus-spider
Sources
MISPETDAMalpedia
Merge evidence
2 alias matches

Reports per quarter

Dated reports, 2020 Q2 to 2026 Q2.

Techniques seen in the last two years

Show all 21 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Circus Spider - Threat Group Cards: A Threat Actor Encyclopedia

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  2. Netwalker Ransomware Guide: Everything You Need to Know

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Ransomware Threat Assessments: A Companion to the 2021 Unit 42 Ransomware Threat Report

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Press #1 to Play: A Look Into eCrime Menu-style Toolkits | CrowdStrike

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Report2020CrowdStrikeServicesCyberFrontLines.pdf

    file creation date ORKL

    Archived copy on ORKL Details

  6. Microsoft Word - Netwalker-Report-Final.docx

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.