threat actor

WIZARD SPIDER

unknownentity:threat_actor

Wizard Spider is reportedly associated with Grim Spider and Lunar Spider.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: wizard-spider
kind: threat actor
status: unknown
aliases: DEV-0193 · DEV-0237 · FIN12 · GOLD BLACKBURN · GOLD ULRICK · Grim Spider · GRIM SPIDER · ITG23 · Periwinkle Tempest · Pistachio Tempest · Storm-0193 · Storm-0230 · TEMP.MixMaster · Trickbot LLC · UNC1878 · UNC2053
jurisdictions: —
claims naming it: 0 · 0 attributions · 11 relations · 0 events

Identifiers

attack G0102via mitre-attack
misp-galaxy 3c2bb7d7-a085-4594-adc7-4a20cf724abbvia misp-galaxy-threat-actor
misp-galaxy 3cf6dbb5-bf9e-47d4-a8d5-b6d76f5a791fvia misp-galaxy-threat-actor
misp-galaxy bdf4fe4f-af8a-495f-a719-cf175cecda1fvia misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesTrickBot
fetch —sha256 dc1639caa5501d72
rel_580btcintel:relations:580@v1 sha256:2d84c142b2a27dff
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesSystemBC
fetch —sha256 dc1639caa5501d72
rel_581btcintel:relations:581@v1 sha256:210a0b2eb3bc8bcc
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesBazar
fetch —sha256 dc1639caa5501d72
rel_582btcintel:relations:582@v1 sha256:8133bf755eb7c20e
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesGrimAgent
fetch —sha256 dc1639caa5501d72
rel_583btcintel:relations:583@v1 sha256:3cce8f4631ca81d2
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesDyre
fetch —sha256 dc1639caa5501d72
rel_584btcintel:relations:584@v1 sha256:dd6716e6d6288265
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesRyuk
fetch —sha256 dc1639caa5501d72
rel_585btcintel:relations:585@v1 sha256:2029c656ae7a4d24
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesConti
fetch —sha256 dc1639caa5501d72
rel_586btcintel:relations:586@v1 sha256:49c8a44f5d3ae234
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesEmotet
fetch —sha256 dc1639caa5501d72
rel_587btcintel:relations:587@v1 sha256:45f1024e621682d1
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesAnchor
fetch —sha256 dc1639caa5501d72
rel_588btcintel:relations:588@v1 sha256:5534e7c6889f2d8a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesDiavol
fetch —sha256 dc1639caa5501d72
rel_589btcintel:relations:589@v1 sha256:d95480c52112f355
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesCobalt Strike
fetch —sha256 dc1639caa5501d72
rel_590btcintel:relations:590@v1 sha256:8b154bfba69bf3da
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.