TINY SPIDER

Also known as: TINY SPIDER, Tiny Spider

According to CrowdStrike, this actor is using TinyLoader and TinyPOS, potentially buying access through Dridex infections.

🌍 Country ["[Unknown]"]

Associated Operations

2017 A new family of point-of-sale malware but can delivered a hefty blow to POS endpoints. dubbed PinkKite has been identified by researchers who say the malware is tiny in size https://threatpost.com/new-pos-malware-pinkkite-takes-flight/130428/

Introduction

According to CrowdStrike, this actor is using TinyLoader and TinyPOS, potentially buying access through Dridex infections.

Activities and Tactics

Country of Origin: 🏳️ [“[Unknown]”]

Notable Campaigns

  • 2017
  • A new family of point-of-sale malware
  • but can delivered a hefty blow to POS endpoints.
  • dubbed PinkKite
  • has been identified by researchers who say the malware is tiny in size
  • https://threatpost.com/new-pos-malware-pinkkite-takes-flight/130428/

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • TINY
  • PinkKite:
  • PsExec:
  • TinyLoader:
  • TinyPOS:

Attribution and Evidence

Country of Origin: [“[Unknown]”] Additional attribution information pending cataloguing.

References

References pending cataloguing.