GINC-APT-0953 · Tracked, unattributed

Sp1d3r

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0953 · sp1d3r

What it is

Sp1d3r, a threat actor, has been involved in multiple data breaches targeting companies like Truist Bank, Cylance, and Advance Auto Parts. They have stolen and attempted to sell sensitive information, including customer and employee emails, account numbers, and source code. Sp1d3r has also claimed to have obtained data from a third-party platform and a cloud storage vendor. They have utilized hacking forums to sell the stolen data for significant sums of money.

Tools

The tools and malware families the sources tie to it.

  • CloudDuke
  • Hacking Team UEFI Rootkit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de