PIZZO SPIDER
DD4BCAmbiorx
origin (suspected)
USAattribution confidence: medium (50)
source: misp-galaxy1 refs →
PIZZO SPIDER· USA
PIZZO SPIDER, also known as DD4BC, is a threat actor notorious for severe DDoS attacks to extort Bitcoin ransoms.
Analyst brief
PIZZO SPIDER, also known as DD4BC, is a threat actor notorious for launching severe DDoS attacks primarily to extort Bitcoin ransoms. It primarily targets financial institutions, online gaming platforms, and even cybersecurity firms. The main TTPs involve Layer 3/4 amplification attacks (e.g., NTP, DNS) and Layer 7 exhaustion, coupled with threatening extortion emails. Defenders should focus on having robust anti-DDoS services ready for sudden traffic spikes, restricting amplification vectors, and preparing response procedures for ransom demands.
unknown
FAQ2
What is the primary objective of PIZZO SPIDER's DDoS attacks?
PIZZO SPIDER launches severe DDoS attacks primarily to extort Bitcoin ransoms.
What are the main DDoS amplification vectors used by PIZZO SPIDER?
The main TTPs of PIZZO SPIDER include Layer 3/4 amplification attacks, such as NTP and DNS amplification.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.