BTCintel
nodeok
mempool71,761 tx
node next1.08 sat/vB
retarget40 blocks
chainmainnet

threat actor

GRIM SPIDER

unknownentity:threat_actor

GRIM SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER, a criminal enterprise of which GRIM SPIDER appears to be a cell. The WIZARD SPIDER threat group, known as the Russia-based operator of the TrickBot banking malware, had focused primarily on wire fraud in the past.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id
grim-spider
kind
threat actor
status
unknown
aliases
—
jurisdictions
—
claims naming it
0 · 0 attributions · 0 relations · 0 events

Identifiers

computedno identifiers recorded by any source

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.