CLOCKWORK SPIDER
- First seen
- 2017-02-15 00:00:00
- Primary motivation
- espionage
- Sophistication
- intermediate
- Resource level
- organization
- Actor type
- nation-state, criminal
- Profile updated
- 2026-07-07 11:49:43
Targeted industries: government-and-public-sector financial-services
Context
Opportunistic actor that installs custom root certificate on victim to support man-in-the-middle network monitoring.
Reports & references
- CrowdStrike — Report2020Crowdstrikeglobalthreatreport (report)
- na.eventscloud.com — 6568237Bca6Dc156E5C5557C5989E97C Crowdstrikefal.Con2019 Througheyesofadversary J.Ayers (report)