Search for adversaries

Scion Spider

Details

SCION SPIDER is a Ransomware-as-a-Service (RaaS) affiliate that achieves initial access by compromising servers running Microsoft SQL Server. The adversary typically leverages the built-in SQL extended procedure xp_cmdshell to run shell commands. SCION SPIDER uses either PowerShell (PS) commands directly or the Microsoft SQL Server-native sqlps utility to run PS commands for downloading payloads a...

Objective

  • YjKmNV1qeUwxGr2

Motivation

  • efoFkIwC

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.

Unlock the adversary universe

First Name
Last Name
Job Level
Country
Phone Number
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.

Thank you for your request!

A member of our team will be in touch shortly.

CrowdStrike logo