SALTY SPIDER

Reports per quarter

CVEs named in reports

• CVE-2016-5195 KEV
• CVE-2018-4878 KEV ransomware
• CVE-2018-8174 KEV ransomware
• CVE-2018-8405 KEV ransomware
• CVE-2018-8406 KEV ransomware
• CVE-2022-2003

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Who is SALTY SPIDER (Sality)?| Threat Actor Profile | CrowdStrike

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Who is SALTY SPIDER (Sality)?| Threat Actor Profile | CrowdStrike

2. 6 April 2026

   Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure | CISA

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure | CISA

3. 6 April 2026

   FlawedAmmyy (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor FlawedAmmyy (Malware Family)

4. 14 July 2022

   The Trojan Horse Malware & Password “Cracking” Ecosystem Targeting Industrial Operators

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor The Trojan Horse Malware & Password “Cracking” Ecosystem Targeting Industrial Operators

5. 20 April 2022

   Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

   file creation date CISA, NSA, FBI fromORKL

   Archived copy on ORKL Detailsfor Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

6. 20 April 2022

   Russian State-Sponsored and Criminal Cyber .pdf

   file creation date fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Russian State-Sponsored and Criminal Cyber .pdf

7. 20 April 2022

   AA22-110A_Joint_CSA_Russian_State-Sponsored_and_Criminal_Cyber_Threats_to_Critical_Infrastructure_4_20_22_Final.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor AA22-110A_Joint_CSA_Russian_State-Sponsored_and_Criminal_Cyber_Threats_to_Critical_Infrastructure_4_20_22_Final.pdf

8. 20 April 2022

   Alert (AA22-110A)- Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Alert (AA22-110A)- Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

9. 20 April 2022

   Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure | CISA

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure | CISA

10. 27 October 2021

    Portable Executable File Infecting Malware Is Increasingly Found in OT Networks | Mandiant

    Malpedia library date fromORKL

    Archived copy on ORKL Detailsfor Portable Executable File Infecting Malware Is Increasingly Found in OT Networks | Mandiant

Newest first. Details opens the report in Explore.