- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Motivation
- Financial gain
- Seen
- 2011
- Sources
- 6 sources carry it
- Identifier
- GINC-APT-0344 · smoky-spider
What it is
Mentioned as operator of SmokeLoader in CrowdStrike's 2020 Report.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- CrowdStrike
- Smoky Spider
Tools
The tools and malware families the sources tie to it.
- Sasfis
- Smoke Loader
Sources
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de