BOSON SPIDER is a financially motivated criminal group known for operating the CoreBot banking trojan. The group emerged in mid-2015, with its activities publicly reported in August of that year, and utilizes an affiliate model for its operations. Unlike sophisticated state-sponsored groups, BOSON SPIDER focuses on widespread financial theft rather than cyber-espionage or critical infrastructure targeting. The group's primary tool, CoreBot, is designed to steal sensitive financial data and is distinguished by its modular architecture, enabling easy integration of new capabilities.