# GOLD BURLAP: threat group profile

> GOLD BURLAP is a threat group. Public reporting about it is still limited. This free profile brings together what is known about it, so you can judge the risk to you. It lists the other names the group goes by and links to every public report behind it.

Canonical page: https://www.precursorintelligence.com/threat-actors/gold-burlap
Breadcrumb: [Home](https://www.precursorintelligence.com/) > [Threat groups](https://www.precursorintelligence.com/threat-actors) > GOLD BURLAP

## At a glance

| Fact | Value |
|---|---|
| Attack techniques | 0 |
| Thought to operate from | Not known |
| Other names | 1 |
| Public reports | 2 |

## Who is GOLD BURLAP?

GOLD BURLAP is a threat group. Public reporting about it is still limited.

### Also known as

CYBORG SPIDER

Security companies each give the same group their own name, so one group can have many.

### What public reporting says

> GOLD BURLAP is a group of financially motivated criminals responsible for the development of the Pysa ransomware, also referred to as Mespinoza. Pysa is a cross-platform ransomware with known versions written in C++ and Python. As of December 2020, approximately 50 organizations had reportedly been targeted in Pysa ransomware attacks. The operators leverage 'name and shame' tactics to apply additional pressure to victims. As of January 2021, CTU researchers had found no Pysa advertisements on underground forums, which likely indicates that it is not operated as ransomware as a service (RaaS).

## Who does GOLD BURLAP go after?

**Sectors:** Healthcare

See threats by industry: https://www.precursorintelligence.com/industries

## Public reports about GOLD BURLAP

- http://www.secureworks.com/research/threat-profiles/gold-burlap
- https://www.hhs.gov/sites/default/files/mespinoza-goldburlap-cyborgspider-analystnote-tlpwhite.pdf

## Frequently asked questions

### Who is GOLD BURLAP?

GOLD BURLAP is a threat group. Public reporting about it is still limited.

### Who does GOLD BURLAP target?

In public reporting, sectors named include healthcare.

### How do I know if GOLD BURLAP is a risk to my business?

Create an account and tell us the software you run. We match it against known flaws, including those linked to threat groups, rank each one from 0 to 100 and tell you as soon as we spot something that affects you.

## Check whether it matters to your business

A free Precursor Intelligence account (no card needed) matches the software you run against known flaws, including those linked to threat groups, ranks each one from 0 to 100 and tells you as soon as we spot something that affects you. It also shows which threat groups and ransomware gangs are hitting your sector, with profiles of over 900 groups and a PDF dossier for each.

- Start free: https://www.precursorintelligence.com/register
- Book a demo: https://www.precursorintelligence.com/contact