SHARK SPIDER is a financially motivated APT group known for using the Shylock banking Trojan against banking targets.
SHARK SPIDER has been active since at least 2013. It primarily targets the banking sector. The group leverages the Shylock banking Trojan to compromise online banking credentials and Bitcoin wallet credentials. Defenders should monitor for known indicators of compromise (IoCs) associated with Shylock and anomalous activities related to credential theft and manipulation.
This group's activity was first observed in November 2013. It leverages a banking Trojan more commonly known as Shylock which aims to compromise online banking credentials and credentials related to Bitcoin wallets.
SHARK SPIDER leverages the Shylock banking Trojan to compromise online banking credentials and Bitcoin wallet credentials.
Defenders should monitor for known indicators of compromise (IoCs) associated with Shylock and anomalous activities related to credential theft and manipulation.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.