Traveling Spider

Russian Federation

Details

TRAVELING SPIDER is the criminal developer and vendor of several ransomware variants, including Nemty, Nemty X (a.k.a. Nefilim), Karma, Nokoyawa, INC, and Lynx. With each new ransomware variant, TRAVELING SPIDER retires the previous variant. TRAVELING SPIDER openly advertised Nemty in an affiliate program on a Russian-language forum, using the monikers jsworm and jingo. However, in mid-April 2020,...

Community Identifiers

hkHrTpO1JMK4LYW

Objective

  • cgimAsMVFvJ5yDX

Motivation

  • bjYRam3K

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.