TINY SPIDER is a criminal threat actor first documented in 2015, primarily motivated by financial gain. The group is known for its specialized focus on point-of-sale (POS) systems, employing custom-developed malware families like TinyLoader, TinyPOS, and PinkKite to scrape credit card data. While initially engaged in data theft from POS environments, the group has evolved its operational model to include ransomware deployments, indicating a shift towards broader extortion strategies. Its distinguishing characteristic is the development and use of compact, assembly-language-based malware designed for stealth and efficient credit card data exfiltration. The group is attributed with moderate confidence to Eastern European origins, despite an initial, contradictory assessment of a US suspected state sponsor in some internal data. TINY SPIDER is distinct from the more recently emerged Scattered Spider threat actor.

Actores similares

Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1dextorous-spideractor · 1