WOLF SPIDER
0 incidentes
0 paises
0 sectores
apt RO Ultimo: -
Aliases: FIN4, G0085
WOLF SPIDER is a financially motivated cybercriminal group that emerged around 2013, initially operating as FIN4, focusing on stealing financial market intelligence through credential theft without deploying traditional malware. The group has since undergone a notable evolution, transitioning into a prominent ransomware operation and adopting multiple aliases, including G0085, UNC3944, SCATTERED SPIDER, and is strongly associated with the ALPHV/BlackCat ransomware family. This group is distinguished by its sophisticated social engineering tactics, pervasive use of double and occasionally triple extortion, and adaptive attack methodologies, including the development of Rust-based ransomware. While the input suggests a suspected Romanian state sponsorship, public intelligence from authoritative sources indicates the actors are primarily native English-speakers, potentially based in the US, UK, or Canada, or are Russian-speaking cybercriminals, creating an unconfirmed and conflicting orig
Sectores objetivo (OSINT)
FinanceHealthCare & Social AssistanceChemical&Pharmaceutical ManufacturingHospitalsAccommodationAir TransportationConstructionPublic AdministrationRestaurantsInternet Publishing