Loading threat actor…
Squab Spider is a financially motivated cybercriminal threat actor identified as one of the major operators targeting Latin America. The group is assessed to be either based in Latin America or primarily focused on victims in the region. Publicly available reporting in this context does not provide high-confidence detail on the group’s specific malware families, intrusion techniques, victimology by sector, or operational sub-groups beyond its inclusion among prominent regional financially motivated actors. Its placement alongside other major criminal operators in the Latin American threat landscape indicates involvement in profit-driven intrusion activity, but more granular attribution on tactics, capabilities, and targeting is not currently available.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.