Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Also known as: Gold Essex, Storm-0302, GOLD ESSEX, TA544
CrowdStrike Falcon Intelligence has observed a new Cutwail spam campaign from NARWHAL SPIDER on 24 October 2018. NARWHAL SPIDER is the adversary name designated by Falcon Intelligence for the criminal operator of Cutwail version 2. NARWHAL SPIDER primarily provides spam services with a large customer base that has included malware operators such as Wizard Spider, Gold Blackburn (developer of TrickBot), affiliates of BAMBOO SPIDER (developer of Panda Zeus), and many others including URLZone, Nymaim and Gozi ISFB. The targets and payloads delivered through Cutwail spam campaigns are determined by the customers of NARWHAL SPIDER. Cutwail has been observed to distribute Dyre (Wizard Spider, Gold Blackburn), Zeus Panda ( Bamboo Spider, TA544 ) and much of the malware from TA505, Graceful Spider, Gold Evergreen .
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database