GINC-APT-1118 · Criminal

File Spider

Also Spider.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Seen
2014
Status
Dormant
Sources
2 sources carry it
Identifier
GINC-APT-1118 · file-spider

What it is

A new ransomware called File Spider is being distributed through spam that targets victims in Bosnia and Herzegovina, Serbia, and Croatia. These spam emails contains malicious Word documents that will download and install the File Spider ransomware onto a victims computer.File Spider is currently being distributed through malspam that appears to be targeting countries such as Croatia, Bosnia and Herzegovina, and Serbia. The spam start with subjects like"Potrazivanje dugovanja", which translates to "Debt Collection" and whose message, according to Google Translate, appear to be in Serbian.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

CrowdStrike
Spider