Loading threat actor…
Ocular Spider is a financially motivated cybercriminal threat actor identified as one of the major operators targeting Latin America. The group is assessed to be either based in Latin America or primarily focused on victims in the region. Publicly available reporting places Ocular Spider among a cluster of prominent regional criminal operators that also includes Blind Spider, Odyssey Spider, Plump Spider, Samba Spider, and Squab Spider. High-confidence reporting directly supports Ocular Spider’s role as a significant financially motivated actor active against Latin American organizations, but does not provide corroborated detail on specific malware families, intrusion techniques, victim sectors, or extortion workflows attributable to this actor alone.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.