GURU SPIDER
Early in 2018, CrowdStrike Intelligence observed GURU SPIDER supporting the distribution of multiple crimeware families through its flagship malware loader, Quant Loader.
source: misp-galaxy1 refs →
GURU SPIDER
GURU SPIDER is a financially motivated cybercriminal group active since 2018, distributing multiple crimeware families through the Quant Loader.
Analyst brief
GURU SPIDER is a threat actor active since early 2018, primarily operating as a cybercriminal group. They focus on financially motivated attacks, targeting a wide range of organizations. Their main TTP involves using their flagship malware loader, Quant Loader, to distribute multiple crimeware families. Defenders should prioritize monitoring for network anomalies, strengthening email security controls against initial infection vectors like phishing, and focusing on detecting multi-stage payload delivery chains.
unknown
FAQ2
What is the primary malware used by GURU SPIDER to distribute crimeware families?
GURU SPIDER uses its flagship malware loader, Quant Loader, to distribute multiple crimeware families.
What should defenders do against GURU SPIDER's initial infection vectors?
Defenders should strengthen email security controls against initial infection vectors like phishing.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.