WIZARD SPIDER

Threat Actor

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Incidents Associated with this Threat

No incidents identified

Malware Used by this Threat Actor

No malware identified for this threat actor.