All actors

RIDDLE SPIDER

Also reported as Riddle Spider and Avaddon Team.

Reports
125
Last reported
Known CVEs
126
ID
riddle-spider
Merge evidence
2 alias matches

Reports per quarter

  1. 2020 Q1: 1 report
  2. 2020 Q2: 9 reports
  3. 2020 Q3: 7 reports
  4. 2020 Q4: 8 reports
  5. 2021 Q1: 7 reports
  6. 2021 Q2: 24 reports
  7. 2021 Q3: 13 reports
  8. 2021 Q4: 2 reports
  9. 2022 Q1: 9 reports
  10. 2022 Q2: 5 reports
  11. 2022 Q3: 1 report
  12. 2022 Q4: no reports
  13. 2023 Q1: no reports
  14. 2023 Q2: no reports
  15. 2023 Q3: no reports
  16. 2023 Q4: no reports
  17. 2024 Q1: 1 report
  18. 2024 Q2: no reports
  19. 2024 Q3: no reports
  20. 2024 Q4: no reports
  21. 2025 Q1: no reports
  22. 2025 Q2: no reports
  23. 2025 Q3: no reports
  24. 2025 Q4: no reports
  25. 2026 Q1: no reports
  26. 2026 Q2: 38 reports
Dated reports, 2020 Q1 to 2026 Q2.

CVEs named in reports

Show all 126 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. TEARDROP (Malware Family)

    date ORKL added it fromORKL

  2. Amadey (Malware Family)

    date ORKL added it fromORKL

  3. RagnarLocker (Malware Family)

    date ORKL added it fromORKL

  4. Hades (Malware Family)

    date ORKL added it fromORKL

  5. SUNBURST (Malware Family)

    date ORKL added it fromORKL

  6. SystemBC (Malware Family)

    date ORKL added it fromORKL

Show all 125 reports Show fewer
  1. QakBot (Malware Family)

    date ORKL added it fromORKL

  2. Nefilim (Malware Family)

    date ORKL added it fromORKL

  3. DanaBot (Malware Family)

    date ORKL added it fromORKL

  4. BazarBackdoor (Malware Family)

    date ORKL added it fromORKL

  5. Clop (Malware Family)

    date ORKL added it fromORKL

  6. Conti (Malware Family)

    date ORKL added it fromORKL

  7. REvil (Malware Family)

    date ORKL added it fromORKL

  8. SmokeLoader (Malware Family)

    date ORKL added it fromORKL

  9. Babuk (Malware Family)

    date ORKL added it fromORKL

  10. Dridex (Malware Family)

    date ORKL added it fromORKL

  11. PyXie (Malware Family)

    date ORKL added it fromORKL

  12. IcedID (Malware Family)

    date ORKL added it fromORKL

  13. WastedLocker (Malware Family)

    date ORKL added it fromORKL

  14. Zloader (Malware Family)

    date ORKL added it fromORKL

  15. DarkSide (Malware Family)

    date ORKL added it fromORKL

  16. MedusaLocker (Malware Family)

    date ORKL added it fromORKL

  17. Cobalt Strike (Malware Family)

    date ORKL added it fromORKL

  18. Ryuk (Malware Family)

    date ORKL added it fromORKL

  19. Maze (Malware Family)

    date ORKL added it fromORKL

  20. BlackMatter (Malware Family)

    date ORKL added it fromORKL

  21. BlackMatter (Malware Family)

    date ORKL added it fromORKL

  22. Egregor (Malware Family)

    date ORKL added it fromORKL

  23. LockBit (Malware Family)

    date ORKL added it fromORKL

  24. watchtower-2023-eoy-report-en

    file creation date fromORKL

  25. yir-cyber-threats-report-download.pdf

    Malpedia library date fromORKL

  26. Threat Profile- Avaddon

    date in the title fromORKL

  27. Ransomware Threat Report 2022

    date in the title fromORKL

  28. The Ransomware Threat Intelligence Center

    date in the title fromORKL

  29. ALPHV ransomware gang analysis

    date in the title fromORKL

  30. One Source to Rule Them All- Chasing AVADDON Ransomware

    date in the title fromORKL

  31. LockBit 2.0 Interview with Russian OSINT

    Malpedia library date fromORKL

  32. LockBit 2.0 Interview with Russian OSINT

    date in the title fromORKL

  33. All Access Pass- Five Trends with Initial Access Brokers

    date in the title fromORKL

  34. Ransomware Gangs are Starting to Look Like Ocean’s 11

    date in the title fromORKL

  35. AvosLocker Ransomware

    date in the title fromORKL

  36. The First Step- Initial Access Leads to Ransomware

    date in the title fromORKL

  37. Avaddon ransomware shuts down and releases decryption keys

    date in the title fromORKL

  38. Avaddon Ransomware Analysis

    date in the title fromORKL

  39. eset_threat_report_t12021

    file creation date fromORKL

  40. Intel 471

    Malpedia library date fromORKL

  41. W4 Jan - EN - Story of the week- Ransomware on the Darkweb

    date in the title fromORKL

  42. Avaddon Ransomware- Incident Response Analysis

    date in the title fromORKL

  43. Group-IB_Hi-Tech_Crime_Trends_2020-2021_en

    file creation date fromORKL

  44. ESET_Threat_Report_Q32020

    file creation date fromORKL

  45. Threat Hunting for Avaddon Ransomware

    date in the title fromORKL

  46. Leakware-Ransomware-Hybrid Attacks

    date in the title fromORKL

  47. ESET_Threat_Report_Q22020

    file creation date fromORKL

  48. Avaddon- From seeking affiliates to in-the-wild in 2 days

    date in the title fromORKL

  49. Ransomware Avaddon- principales características

    date in the title fromORKL

Newest first. Details opens the report in Explore.