- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0388 · chatty-spider
What it is
A cybercriminal actor known to carry out "callback phishing" social engineering attacks.<sup>[CrowdStrike 2025 Global Threat Report]</sup>
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Microsoft
- Storm-0252
Tools
The tools and malware families the sources tie to it.
- Back Orifice
- Back Orifice 2000
- Cyber Eye RAT
- CyberGate
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de