SALTY SPIDER is a financially motivated eCrime group, assessed with high confidence to originate from Russia, specifically the Republic of Bashkortostan. The group first emerged in 2003 and is primarily known for developing and operating the Sality botnet, a polymorphic file infector that has continuously evolved through advanced peer-to-peer (P2P) versions since 2008. While broadly known for ransomware and phishing attacks, their core monetization strategy centers on large-scale infections for cryptocurrency theft and cryptojacking. A distinguishing characteristic of SALTY SPIDER is its reliance on a decentralized P2P infrastructure for the Sality botnet and its notable strategic shift in 2017 from traditional spambot and proxy payloads to focusing on cryptocurrency-related activities. The group operates under several aliases, including Sality, KuKu, SalLoad, Kookoo, SaliCode, and Kukacka.

Actores similares

salty-spideractor · 1Scattered Spideractor · 2Indrik Spideractor · 1doppel-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1