GINC Technology
GINC-APT-0311 · Criminal

MALLARD SPIDER

Also Mallard Spider, Gold Lagoon, ITG26, White Horoja.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Motivation
Financial crime; Financial gain
Seen
2008
Sources
6 sources carry it
Identifier
GINC-APT-0311 · mallard-spider

What it is

Crowdstrike tarcks the operators behind the Qbot as MALLARD SPIDER

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

CrowdStrike
Mallard Spider
IBM X-Force
ITG26
PwC
White Horoja
Other names
Gold Lagoon

Tools

The tools and malware families the sources tie to it.

  • Egregor
  • Mimikatz
  • ProLock
  • QakBot

Sources