G1011 EXOTIC LILY
Enterprisealso known asEXOTIC LILY
EXOTIC LILY is a financially motivated group that has been closely linked with Wizard Spider and the deployment of ransomware including Conti and Diavol. EXOTIC LILY may be acting as an initial access broker for other malicious actors, and has targeted a wide range of industries including IT, cybersecurity, and healthcare since at least September 2021.
01
canonical actor
The group this is attributed to.
02
techniques used (15)
ATT&CK techniques this enables or maps to.
03
software used (2)
Malware and tools associated with this.
04
source
Where this definition is published.