According to Crowdstrike, RIDDLE SPIDER is the operator behind the avaddon ransomware
No exploited CVEs have been attributed to this threat actor yet.