LUNAR SPIDER is a financially motivated, Russian-speaking cybercriminal group that emerged in April 2017 with the development and deployment of the BokBot (also known as IcedID) banking malware. Initially focused on credential theft and wire fraud through their malware-as-a-service offerings, the group has since evolved its operational model to become a prominent initial access broker within the cybercrime ecosystem. They are distinguished by their continuous development and adaptation of new malware loaders, such as Latrodectus, following disruptions to their earlier infrastructure, demonstrating a highly dynamic and business-like approach to their criminal enterprises. LUNAR SPIDER, also identified as GOLD SWATHMORE, frequently collaborates with other significant e-crime groups, including WIZARD SPIDER and affiliates of ALPHV/BlackCat, by providing initial network access to facilitate subsequent ransomware deployments.

Aliases del actor

GOLD SWATHMOREIcedID (BokBot)está relacionado con actividades de Financial Crime

Actores similares

lunar-spideractor · 1Scattered Spideractor · 2Indrik Spideractor · 1doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1