SYMBOLCOMMON_NAMEaka. SYNONYMS

ZOMBIE SPIDER  (Back to overview)


On April 7, 2017, Pytor Levashov — who predominantly used the alias Severa or Peter Severa and whom Falcon Intelligence tracks as ZOMBIE SPIDER — was arrested in an international law enforcement operation led by the FBI. ZOMBIE SPIDER’s specialty was large-scale spam distribution, a fundamental component of cybercrime operations. Levashov was the primary threat actor behind a botnet known as Kelihos and its predecessors, Waledac and Storm. In addition to Levashov’s arrest, there was a technical operation conducted by Falcon Intelligence to seize control of the Kelihos botnet.


Associated Families

There are currently no families associated with this actor.


References
2019-03-06CrowdStrikeBex Hartley, Brendon Feeley, Sergei Frankoff
PINCHY SPIDER Affiliates Adopt “Big Game Hunting” Tactics to Distribute GandCrab Ransomware
Gandcrab Phorpiex PINCHY SPIDER ZOMBIE SPIDER
2018-12-05CrowdStrikeBex Hartley, Brett Stone-Gross, Tillmann Werner
Farewell to Kelihos and ZOMBIE SPIDER
Kelihos ZOMBIE SPIDER
2018-01-01CrowdStrikeCrowdStrike
2018 Global Threat Report
Mangzamel BAMBOO SPIDER HOUND SPIDER ZOMBIE SPIDER
2017-04-13CrowdStrikeFalcon Intelligence Team
Inside the Takedown of ZOMBIE SPIDER and the Kelihos Botnet
Kelihos ZOMBIE SPIDER
2017-04-10US Department of JusticeUS Department of Justice
Justice Department Announces Actions to Dismantle Kelihos Botnet
ZOMBIE SPIDER

Credits: MISP Project