Search for adversaries

Recess Spider

Details

RECESS SPIDER—publicly tracked as PLAY or PlayCrypt—is a Big Game Hunting (BGH) adversary who first emerged in June 2022. RECESS SPIDER develops and privately operates PLAY ransomware. In addition to PLAY ransomware, the adversary uses the custom discovery and defense evasion tool GRB_NET. RECESS SPIDER has also deployed a downloader currently tracked as FrostbiteLoader. RECESS SPIDER has continuo...

Community Identifiers

nb37XxCoKH60tWY

Objective

  • DbfgTmAXiyh9PQw

Motivation

  • 9RiQK0U8

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.

Unlock the adversary universe

First Name
Last Name
Job Level
Country
Phone Number
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.

Thank you for your request!

A member of our team will be in touch shortly.

CrowdStrike logo