BOSON SPIDER is an Eastern European cyber criminal group known for using the Angler exploit kit before disappearing in 2016.
BOSON SPIDER is a cyber criminal group operating out of Eastern Europe. Active since 2015, they targeted various sectors before inexplicably going dark in spring 2016. Their primary TTPs include the Angler exploit kit and obfuscated JavaScript for antivirus evasion. Defenders should monitor for obfuscated JavaScript execution in web traffic and enforce robust patch management against exploit kit vulnerabilities.
BOSON SPIDER is a cyber criminal group, which was first identified in 2015, recently and inexplicably went dark in the spring of 2016, appears to be a tightly knit group operating out of Eastern Europe. They have used a variety of distribution mechanisms such as the infamous (and now defunct) angler exploit kit, and obfuscated JavaScript to reduce the detection by antivirus solutions.
BOSON SPIDER's primary TTPs include the Angler exploit kit and obfuscated JavaScript for antivirus evasion.
BOSON SPIDER inexplicably went dark in the spring of 2016.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.