Wizard Spider is reportedly associated with Grim Spider and Lunar Spider. The WIZARD SPIDER threat group is the Russia-based operator of the TrickBot ...

Threat Actor Profile

WIZARD SPIDER

State-sponsored threat group originating from RU. Suspected sponsor: Russian Federation. Known to target Defense, Financial, Government and 2 other sectors.

5 Industries Tracked Real-Time Alerts

Actor Overview

Origin Country
RU
Suspected Sponsor
Russian Federation

Target Industries

DefenseFinancialGovernmentHealthcareTelecommunications

Suspected Victims

AustraliaBahamasCanadaCosta RicaFranceGermanyIndiaIrelandItalyJapanMexicoNew ZealandSpainSwitzerlandTaiwanUnited KingdomUkraineUnited States

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on WIZARD SPIDER is published.

Actor Details

Primary Name
WIZARD SPIDER
Known Aliases
TEMP.MixMaster, GOLD BLACKBURN, FIN12, Periwinkle Tempest, DEV-0193, Storm-0193, Trickbot LLC, UNC2053, Pistachio Tempest, DEV-0237
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →