Curly Spider Adversary Profile | CrowdStrike
Archived: 2026-04-05 17:33:52 UTC
Discover the adversaries targeting your industry
 Back to Adversary Universe
CURLY SPIDER is an eCrime group who has conducted intrusions targeting predominantly North America- and
Western Europe-based entities across various sectors. Analysis of leaked chat logs shows that CURLY SPIDER
likely originated from MALLARD SPIDER, and likely operated as an initial access broker (IAB) and ransomware
affiliate for WANDERING SPIDER before migrating to TUNNEL SPIDER's Cactus ransomw...
https://www.crowdstrike.com/adversaries/curly-spider/
Page 1 of 3

Curly Spider
Russian Federation, Eastern Europe, Europe
Community Identifiers
Storm-1811
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
https://www.crowdstrike.com/adversaries/curly-spider/
Page 2 of 3

CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
Source: https://www.crowdstrike.com/adversaries/curly-spider/
https://www.crowdstrike.com/adversaries/curly-spider/
Page 3 of 3