Uptime Hamster: 113d 6h 48mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza WOLF SPIDER

WOLF SPIDER

0 incidentes 0 paises 0 sectores apt RO Ultimo: -
Aliases: FIN4, G0085
Ver en IntelTracker → APTTrail →
WOLF SPIDER is a financially motivated cybercriminal group that emerged around 2013, initially operating as FIN4, focusing on stealing financial market intelligence through credential theft without deploying traditional malware. The group has since undergone a notable evolution, transitioning into a prominent ransomware operation and adopting multiple aliases, including G0085, UNC3944, SCATTERED SPIDER, and is strongly associated with the ALPHV/BlackCat ransomware family. This group is distinguished by its sophisticated social engineering tactics, pervasive use of double and occasionally triple extortion, and adaptive attack methodologies, including the development of Rust-based ransomware. While the input suggests a suspected Romanian state sponsorship, public intelligence from authoritative sources indicates the actors are primarily native English-speakers, potentially based in the US, UK, or Canada, or are Russian-speaking cybercriminals, creating an unconfirmed and conflicting orig

Aliases del actor

FIN4G0085

Actores similares

Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1dextorous-spideractor · 1
Motivacion
Financial crime
Tecnicas MITRE
T1621, T1553, T1087.003, T1003, T1484, T1018 - Remote System Discovery
CVEs relacionadas
CVE-2024-7344, CVE-2024-40766, CVE-2019-11510
Tipo
apt
Pais origen
RO
Motivacion
Financial crime
Impacto
56
Actualizado
Wed, 01 Ju

Sectores objetivo (OSINT)

FinanceHealthCare & Social AssistanceChemical&Pharmaceutical ManufacturingHospitalsAccommodationAir TransportationConstructionPublic AdministrationRestaurantsInternet Publishing