G0119 Indrik Spider
Enterprisealso known asIndrik Spider · Evil Corp · Manatee Tempest · DEV-0243 · UNC2165
Indrik Spider is a Russia-based cybercriminal group that has been active since at least 2014. Indrik Spider initially started with the Dridex banking Trojan, and then by 2017 they began running ransomware operations using BitPaymer, WastedLocker, and Hades ransomware. Following U.S. sanctions and an indictment in 2019, Indrik Spider changed their tactics and diversified their toolset.
01
canonical actor
The group this is attributed to.
02
techniques used (33)
ATT&CK techniques this enables or maps to.
showing 20 of 33
03
software used (8)
Malware and tools associated with this.
04
source
Where this definition is published.