GURU SPIDER

Also reported as Guru Spider. Linked to Russia by one source.

Reports: 9
Last reported: 6 April 2026
Known CVEs: 8
Origin: Russia

ID: guru-spider
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2018 Q1: 2 reports
2018 Q2: 1 report
2018 Q3: no reports
2018 Q4: no reports
2019 Q1: 3 reports
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: 1 report
2020 Q3: 1 report
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2018 Q1 to 2026 Q2.

CVEs named in reports

CVE-2016-5195 KEV
CVE-2018-4878 KEV ransomware
CVE-2018-8174 KEV ransomware
CVE-2018-8405 KEV ransomware
CVE-2018-8406 KEV ransomware
CVE-2025-68613 KEV
CVE-2026-1731 KEV ransomware
CVE-2026-20127 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

Blog: Stay Ahead of Cyber Threats

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Blog: Stay Ahead of Cyber Threats
20 August 2020

CERTFR-2020-CTI-009.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-009.pdf
22 June 2020

CERTFR-2020-CTI-006.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-006.pdf
13 March 2019

Report2019GlobalThreatReport

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2019GlobalThreatReport
20 February 2019

CrowdStrike_GTR_2019.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor CrowdStrike_GTR_2019.pdf
18 February 2019

CrowdStrike_GTR_2019_.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor CrowdStrike_GTR_2019_.pdf
26 April 2018

Necurs Evades Detection via Internet Shortcut File

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Necurs Evades Detection via Internet Shortcut File
28 March 2018

An in-depth malware analysis of QuantLoader

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An in-depth malware analysis of QuantLoader
7 March 2018

Leaked Source Code Turned Into FlawedAmmyy Malware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Leaked Source Code Turned Into FlawedAmmyy Malware | Proofpoint US

Newest first. Details opens the report in Explore.