Spirals
New Group | Active
This is an emerging group, so claims should be treated with caution until independently verified.
None
Victims
5
First Victim
2026-09-18
(est. attack date)
Discovery Date
2026-09-18
Last Seen
2026-10-03
Inactive Since
5
days
Avg Delay
N/A
attack→claim
Infostealer
60.0%
victims with domain
Countries
4
hit
Uptime
92.5% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
-75% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Spirals | Yes | 2026-10-08T21:54:34 |
spiralstfe7rtbna7zlv6szdwmjvjszf2d64zkf6z5jykrwnw5jbgpyd.onion
|
Target
Top 5 Activity Sectors
- Transportation 2
- Financial Services 1
- Healthcare 1
- Technology 1
Top 5 Countries
-
United Arab Emirates
1
-
Uganda
1
-
Oman
1
-
United States
1
Heatmap
KQL Query (3)
-
IIS Worker Process Spawning Shell (Web Shell Initial Access)
Initial Access
Sentinel
T1505.003 -
PsExec-Based Lateral Movement
Lateral Movement
Sentinel
T1021.002 -
Rapid Mass File Modification Burst (Sub-24h Encryption)
Encryption / Impact
Sentinel
T1486
Victims (5)
Seven Seas is a global maritime services group that specializes in providing general ship supplies, …
Armada Credit Bureau Limited is a duly licensed credit reporting and analytics company…
Asyad Group is Oman’s global integrated logistics provider, ranked 4th on Forbes’ “10 Biggest Logist…
Certified IT Asset Disposition (ITAD) and e-waste management for federal agencies, defense contracto…