EXOTIC LILY
EXOTIC LILY is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 3 sectors, including Finance and Healthcare, in Italy. It uses 15 MITRE ATT&CK techniques and exploits 1 known CVE.
- Techniques
- 15
- Exploited CVEs
- 1
- First seen
- Jan 1, 2021
- Last seen
- Apr 28, 2022
- Record updated
Who They Target.
About EXOTIC LILY.
EXOTIC LILY is a financially motivated group that has been closely linked with Wizard Spider and the deployment of ransomware including Conti and Diavol. EXOTIC LILY may be acting as an initial access broker for other malicious actors, and has targeted a wide range of industries including IT, cybersecurity, and healthcare since at least September 2021.
Last updated Jun 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.