NARWHAL SPIDER is a financially motivated criminal actor that emerged around 2007, primarily known for operating the Cutwail version 2 spam botnet. The group, often linked to Russia, provides spam services to other prolific cybercriminal entities, distributing various malware families. Over time, NARWHAL SPIDER has evolved to directly engage in ransomware deployment and complex phishing campaigns, demonstrating adaptability in its operational model. A distinguishing characteristic is its use of sophisticated evasion techniques, including steganography and the WikiLoader malware, to deliver payloads and avoid detection. This group operates under several aliases, including GOLD ESSEX, Storm-0302, and TA544.

Aliases del actor

GOLD ESSEXStorm-0302TA544Panda BankerNarwhal SpiderURLZoneUrsnifNymaimChthonicSmoke LoaderOnline banking

Actores similares

Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1dextorous-spideractor · 1