Who is Salty Spider (Sality)?

guest · Sep 8, 2019

Who is Salty Spider (Sality)?
September 6, 2019
https://www.crowdstrike.com/blog/who-is-salty-spider/

Common Aliases
SALTY SIDER is most commonly identified with the botnet it maintains (Sality) and it’s associated pseudonyms:

KuKu

SalLoad

Kookoo

SaliCode

Kukacka

Click to expand...

SALTY SPIDER’s Origins
SALTY SPIDER is an eCrime group whose actions likely indicate that it’s operating out of Russia – specifically in the Republic of Bashkortostan, a region close to the Kazakhstan border. This adversary has been linked to a botnet known as Sality, which is a polymorphic file infector first discovered in 2003.
SALTY SPIDER’s Targets
Generally, SALTY SPIDER does not appear to be selective when it comes to the nations it targets — the group’s activities have been observed worldwide. However, CrowdStrike has observed higher volumes of Sality v3 infections in Romania and high volumes of v4 activity in Venezuela. The reasoning for these higher pockets of activity in Romania and Venezuela remains unknown.

In 2017, SALTY SPIDER ceased propagation of traditional proxy and spambot payloads, and shifted its sights towards the mining and theft of cryptocurrencies. This shift is likely an indicator that the cryptocurrency industry has proven to be a more lucrative area for monetizing Sality.
Click to expand...

Log in or Sign up

Who is Salty Spider (Sality)?

guest Guest

Log in or Sign up

Who is Salty Spider (Sality)?

guest Guest

Useful Searches