🇷🇺

SHARK SPIDER

APT Group ETDA ✓

Also Known As

No alias recorded

Target Countries

No target country recorded

Sectors Targeted

No targeted sector recorded

Details

Origin 🇷🇺 RU

Last Updated 01 Jun 2022

MITRE ATT&CK 3

T1059.001 T1071.001 T1566.001

Related Zero-Days

No zero-day CVE linked to this actor

Known Names 1 entries

Shark Spider CrowdStrike

Observed Target Countries 1

Based on ETDA data — countries highlighted in red

Worldwide

Description

(Kaspersky) Recently Kaspersky Lab has contributed to an alliance of law enforcement and industry organizations, to undertake measures against the internet domains and servers that form the core of an advanced cybercriminal infrastructure that uses the Shylock Trojan to attack online banking systems around the globe. Shylock is a banking Trojan that was first discovered in 2011. It utilizes man-in-the-browser attacks designed to pilfer banking login credentials from the PCs of clients of a predetermined list of target organizations. Most of these organizations are banks, located in different countries.

Tools Used 1

Shylock

Operations 1

2013-01 New Version of Shylock Malware Spreading Through Skype https://threatpost.com/new-version-shylock-malware-spreading-through-skype-011713/77416/

Reports & References 1

https://securelist.com/shylockcaphaw-malware-trojan-the-overview/64599/

ETDA Profile

Shark Spider

Origin

Russia

First Seen 2011

Motivation

Financial crime

View on ETDA APT Groups ↗