VICE SPIDER
0 incidentes
0 paises
0 sectores
apt RU Ultimo: -
Aliases: DEV-0832, Vanilla Tempest, Vicesociety, PrintNightmare, HelloKitty, Zeppelin ransomware
VICE SPIDER is a Russian-speaking, financially motivated cybercriminal group active since at least April 2021. The group operates under a 'Big Game Hunting' model, focusing on high-value targets for significant ransom demands. While they initially used commodity ransomware variants like Zeppelin and Hello Kitty, the group has evolved to privately operate Rhysida and Interlock ransomware, and has been associated with BlackCat (ALPHV) and Quantum Locker. Uniquely, VICE SPIDER often utilizes modified versions of existing ransomware families rather than exclusively developing their own, and is notorious for disproportionately targeting the education sector. They are also recognized for their expertise in exploiting Kerberos authentication vulnerabilities, contributing to a rise in Kerberoasting incidents. The group is also known by several aliases, including Vice Society, DEV-0832, Vanilla Tempest, Rapid Brigantine, Arcane Mantis, and Nefarious Mantis.
Sectores objetivo (SOCRadar)
ManufacturingEducational ServicesHealthCare & Social AssistancePublic AdministrationRetailScientific Research and Development ServicesBusiness Schools and Computer and Management TrainingGrantmaking and Giving ServicesPeriodical PublishersData Processing, Hosting, and Related Services