G0102 Wizard Spider
EnterpriseICSalso known asWizard Spider · UNC1878 · TEMP.MixMaster · Grim Spider · FIN12 · GOLD BLACKBURN · ITG23 · Periwinkle Tempest · DEV-0193 · Pistachio Tempest · DEV-0237
Wizard Spider is a Russia-based financially motivated threat group originally known for the creation and deployment of TrickBot since at least 2016. Wizard Spider possesses a diverse arsenal of tools and has conducted ransomware campaigns against a variety of organizations, ranging from major corporations to hospitals.
01
canonical actor
The group this is attributed to.
02
techniques used (64)
ATT&CK techniques this enables or maps to.
showing 20 of 64
03
software used (22)
Malware and tools associated with this.
04
source
Where this definition is published.