Who is ANTHROPOID SPIDER?

ANTHROPOID SPIDER is a threat actor, also known as Empire Monkey, CobaltGoblin. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does ANTHROPOID SPIDER exploit?

Specific CVE exploitation data for ANTHROPOID SPIDER is being tracked. Check the Strobes VI threat actor profile for updates.

ANTHROPOID SPIDER

Also known as: Empire Monkey, CobaltGoblin

Exploited CVEs

Overview

Publicly known as 'EmpireMonkey', ANTHROPOID SPIDER conducted phishing campaigns in February and March 2019, spoofing French, Norwegian and Belizean financial regulators and institutions. These campaigns used macro-enabled Microsoft documents to deliver the PowerShell Empire post-exploitation framework. ANTHROPOID SPIDER likely enabled a breach that allegedly involved fraudulent transfers over the SWIFT network.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database

Quick Actions