GOLD SOUTHFIELD
GOLD SOUTHFIELD is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 11 sectors, including Government and Technology, in 5 countries, including the United States and the United Kingdom. It uses 20 MITRE ATT&CK techniques and exploits 17 known CVEs.
Also known as
- Pinchy Spider
- Techniques
- 20
- Exploited CVEs
- 17
- First seen
- Jan 1, 2018
- Last seen
- Jul 6, 2021
- Record updated
Who They Target.
Sectors · 11
Labelsbdef-qf:latestglobal
About GOLD SOUTHFIELD.
GOLD SOUTHFIELD is a financially motivated threat group active since at least 2018 that operates the REvil Ransomware-as-a Service (RaaS). GOLD SOUTHFIELD provides backend infrastructure for affiliates recruited on underground forums to perpetrate high value deployments.
Last updated Jun 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.