Uptime Hamster: 113d 12h 27mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza PINCHY SPIDER

PINCHY SPIDER

0 incidentes 0 paises 0 sectores apt RU Ultimo: -
Aliases: GandCrab, Criminal, actividades relacionadas con dominios, publicaciones en blogs, www
Ver en IntelTracker → APTTrail →
PINCHY SPIDER, also known as FIN7, is a financially motivated cybercriminal group of Eastern European origin, primarily associated with Russia, that emerged around 2012, with its ransomware-focused activities, specifically GandCrab, becoming prominent in January 2018. Initially concentrating on payment card data theft through point-of-sale compromises, the group transitioned significantly in 2020 to 'big game hunting' ransomware operations, developing its own Ransomware-as-a-Service (RaaS) programs such as Darkside and BlackMatter, and affiliating with others like REvil, Maze, and Clop. This group is distinguished by its sophisticated organizational structure, which includes operating through front companies like Combi Security to recruit personnel, and its consistent adaptability, enabling it to persist despite law enforcement actions and continuously evolve its tactics and malware development.

Aliases del actor

GandCrabCriminalactividades relacionadas con dominiospublicaciones en blogswww

Actores similares

pinchy-spideractor · 1Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1
Motivacion
Financial gain, Financial crime
Malware asociado
REvil
Tecnicas MITRE
T1036.004, T1547.001, T1553, T1218.005, T1608.004, T1053
Tipo
apt
Pais origen
RU
Motivacion
Financial gain, Financial crime
Impacto
30
Actualizado
Wed, 01 Ju

Sectores objetivo (OSINT)

Rail TransportationEnterprises & HoldingAccommodationConstructionPublic AdministrationRestaurantsInternet PublishingSpace & DefenseEnergy & Utilities Insurance