GOLD DUPONT is a financially motivated cybercriminal group, also known by the alias SPRITE SPIDER, that specializes in human-operated post-intrusion ransomware attacks using the RansomExx malware, which debuted as Defray777 in 2018. While its underlying group, SPRITE SPIDER, has been active since at least 2017 with various malware, RansomExx became prominent in mid-2020 following attacks on high-profile organizations. The group distinguishes itself by targeting both Windows and Linux environments, hardcoding specific victim details into its ransomware binaries, and employing a double extortion model that includes data theft and publication on a dedicated leak site. The initial description of GOLD DUPONT as state-sponsored and focused on cyber espionage is inaccurate; evidence points to its true nature as a financially driven ransomware operation.

Aliases del actor

SPRITE SPIDER

Actores similares

Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1dextorous-spideractor · 1