All actors

MUMMY SPIDER

Also reported as TA542, GOLD CRESTWOOD, Mummy Spider, ATK 104, Mealybug and 1 other name.

Reports
319
Last reported
Known CVEs
72
ID
mummy-spider
Merge evidence
6 alias matches

Reports per quarter

  1. 2015 Q2: 1 report
  2. 2015 Q3: no reports
  3. 2015 Q4: no reports
  4. 2016 Q1: no reports
  5. 2016 Q2: no reports
  6. 2016 Q3: no reports
  7. 2016 Q4: no reports
  8. 2017 Q1: no reports
  9. 2017 Q2: 4 reports
  10. 2017 Q3: 1 report
  11. 2017 Q4: 5 reports
  12. 2018 Q1: 5 reports
  13. 2018 Q2: no reports
  14. 2018 Q3: 6 reports
  15. 2018 Q4: 4 reports
  16. 2019 Q1: 12 reports
  17. 2019 Q2: 12 reports
  18. 2019 Q3: 3 reports
  19. 2019 Q4: 6 reports
  20. 2020 Q1: 27 reports
  21. 2020 Q2: 10 reports
  22. 2020 Q3: 17 reports
  23. 2020 Q4: 24 reports
  24. 2021 Q1: 25 reports
  25. 2021 Q2: 8 reports
  26. 2021 Q3: 2 reports
  27. 2021 Q4: 19 reports
  28. 2022 Q1: 32 reports
  29. 2022 Q2: 35 reports
  30. 2022 Q3: 9 reports
  31. 2022 Q4: 9 reports
  32. 2023 Q1: 13 reports
  33. 2023 Q2: 6 reports
  34. 2023 Q3: 4 reports
  35. 2023 Q4: 1 report
  36. 2024 Q1: 3 reports
  37. 2024 Q2: no reports
  38. 2024 Q3: no reports
  39. 2024 Q4: 1 report
  40. 2025 Q1: no reports
  41. 2025 Q2: 1 report
  42. 2025 Q3: no reports
  43. 2025 Q4: no reports
  44. 2026 Q1: no reports
  45. 2026 Q2: 14 reports
Dated reports, 2015 Q2 to 2026 Q2.

CVEs named in reports

Show all 72 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Emutet

    date ORKL added it fromORKL

  2. IcedID (Malware Family)

    date ORKL added it fromORKL

Show all 319 reports Show fewer
  1. Fork in the Ice- The New Era of IcedID

    date in the title fromORKL

  2. A Comprehensive Look at Emotet Virus’ Fall 2022 Return

    date in the title fromORKL

  3. VMware Brochure Template US Letter

    Malpedia library date fromORKL

  4. RedSense

    Malpedia library date fromORKL

  5. Emotet Summary- November 2021 Through January 2022

    date in the title fromORKL

  6. Detecting a MUMMY SPIDER campaign and Emotet infection

    date in the title fromORKL

  7. Emotet Tests New Delivery Techniques

    date in the title fromORKL

  8. Russian State-Sponsored and Criminal Cyber .pdf

    file creation date fromORKL

  9. Malware Headliners- Qakbot

    date in the title fromORKL

  10. RedSense

    Malpedia library date fromORKL

  11. CERTFR-2021-CTI-009

    Malpedia library date fromORKL

  12. Botnet-update-Q1-2021.pdf

    Malpedia library date fromORKL

  13. report-bb-2021-threat-report.pdf

    Malpedia library date fromORKL

  14. The_CrowdStrike_2021_Global_Threat_Report

    file creation date fromORKL

  15. The Many Faces of Emotet

    Malpedia library date fromORKL

  16. WIZARD SPIDER Update- Resilient, Reactive and Resolute

    date in the title fromORKL

  17. A Comprehensive Look at Emotet’s Summer 2020 Return

    date in the title fromORKL

  18. 2020-q2-spamhaus-botnet-threat-report.pdf

    Malpedia library date fromORKL

  19. CERTFR-2020-CTI-008

    Malpedia library date CrowdStrike fromORKLCCS '25 data

  20. vmwcb-report-modern-bank-heists-2020.pdf

    Malpedia library date fromORKL

  21. GuLoader delivers RATs and Spies in Disguise

    date in the title fromORKL

  22. 200407-MWB-COVID-White-Paper_Final

    date in the CCS '25 data Malwarebytes fromORKLCCS '25 data

  23. Coronavirus Threat Landscape Update

    date in the title fromORKL

  24. APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT _ Malwarebytes Labs

    date in the CCS '25 data Malwarebytes fromORKLCCS '25 data

  25. Dissecting Emotet - Part 2

    Malpedia library date fromORKL

  26. Report2020CrowdStrikeGlobalThreatReport

    Malpedia library date fromORKL

  27. 2020_State-of-Malware-Report.pdf

    Malpedia library date fromORKL

  28. Dissecting Emotet – Part 1

    Malpedia library date fromORKL

  29. Forensics Report True Hedge

    Malpedia library date fromORKL

  30. News Archiv

    Malpedia library date fromORKL

  31. Emotet Adds New Evasion Technique

    Malpedia library date fromORKL

  32. Report2019GlobalThreatReport

    file creation date fromORKL

  33. CrowdStrike_GTR_2019.pdf

    file creation date fromORKL

  34. Digging into BokBot’s Core Module

    date in the title fromORKL

  35. Holiday lull- Not so much

    date in the title fromORKL

Newest first. Details opens the report in Explore.