- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Motivation
- Financial crime
- Seen
- 2015
- Sources
- 6 sources carry it
- Identifier
- GINC-APT-0357 · tiny-spider
What it is
According to CrowdStrike, this actor is using TinyLoader and TinyPOS, potentially buying access through Dridex infections.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- CrowdStrike
- Tiny Spider
Targets
- Sectors
- Retail
Tools
The tools and malware families the sources tie to it.
- PinkKite
- PsExec
- TINY
- TinyLoader
- TinyPOS
Sources
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de