Indrik Spider
Evil CorpManatee TempestDEV-0243UNC2165
UnattributedNo public state or group attribution on record
Indrik Spider is a Russia-based cybercriminal group that has been active since at least 2014. Indrik Spider initially started with the Dridex banking Trojan, and then by 2017 they began running ransomware operations using BitPaymer, WastedLocker, and Hades ransomware. Following U.S.
MITRE ATT&CK Techniques
Associated Malware
BitPaymerCobalt StrikeDonutDridexEmpireMimikatzPsExecWastedLocker
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.