Feral Spider
Feral Spider is a ransomware group with a financial motive, tracked by Brandefense. It targets the Transportation and Logistics sector in South Africa.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
About Feral Spider.
Feral Spider is a Ransomware group primarily motivated by financial-gain. The group mainly targets enterprise networks, critical infrastructure, and virtualized environments (ESXi) globally, and is assessed to operate with advanced sophistication. It is commonly associated with the exploitation of edge device vulnerabilities (such as CVE-), the deployment of the custom SombRAT backdoor, and double extortion utilizing HelloKitty, FiveHands, and DeathRansom payloads.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.