CLOCKWORK SPIDER
Opportunistic actor that installs custom root certificate on victim to support man-in-the-middle network monitoring.
source: misp-galaxy2 refs →
CLOCKWORK SPIDER
unknown
FAQ2
What type of threat actor is CLOCKWORK SPIDER?
An opportunistic threat actor.
How does CLOCKWORK SPIDER enable man-in-the-middle monitoring on victim systems?
By installing a custom root certificate to monitor network traffic.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.