ZOMBIE SPIDER
Also reported as Zombie Spider. Linked to Russia by one source.
Reports per quarter
CVEs named in reports
- CVE-2017-0144 KEV ransomware
- CVE-2017-0199 KEV ransomware
- CVE-2017-0262 KEV
- CVE-2017-11292 KEV
- CVE-2017-11882 KEV ransomware
- CVE-2017-8759 KEV
- CVE-2021-22941 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Wizard Spider, Gold Blackburn - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Wizard Spider, Gold Blackburn - Threat Group Cards: A Threat Actor Encyclopedia
-
Bamboo Spider, TA544 - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Bamboo Spider, TA544 - Threat Group Cards: A Threat Actor Encyclopedia
-
Farewell to Kelihos and ZOMBIE SPIDER
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Farewell to Kelihos and ZOMBIE SPIDER
-
Inside the Takedown of ZOMBIE SPIDER and the Kelihos Botnet
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Inside the Takedown of ZOMBIE SPIDER and the Kelihos Botnet
Newest first. Details opens the report in Explore.