SLIM SPIDER
- First seen
- 2026-03-01 00:00:00
- Origin
- BR
- Primary motivation
- financial-gain
- Sophistication
- advanced
- Actor type
- criminal
- Profile updated
- 2026-09-08 05:31:04
Targeted industries: financial-services
Targeted regions: country_code:br
Context
SLIM SPIDER is a financially motivated eCrime adversary that has been targeting financial institutions in Brazil since at least March 2026, and whose own origin is placed in the same country. Public reporting credits the group with close familiarity with the Brazilian financial stack: the Pix instant payment scheme, digital asset platforms, and the cloud environments that financial entities run. Its principal implant is MikeDor, a bespoke tool written in Go and cross-compiled for more than one target. No public aliases are listed for the group, and the only public profile covering it is truncated, so the rest of its tradecraft is not asserted here.
Malware & tools used
- MikeDor (malware)