Threat actorRussiaTracked since 2026-10

GRIM SPIDER

Also known as:Periwinkle TempestWIZARD SPIDER

As of 2026-10-17, GRIM SPIDER is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as Periwinkle Tempest, WIZARD SPIDER.

Tracked threats: 11 high
First seen: 2026-102026-10-17
Last seen: 2026-102026-10-17
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: RANSOMWARE

Activity timeline

GRIM SPIDER appears in 1 tracked threat between 2026-10-17 and 2026-10-17.

Tracked threats

Ryuk Ransomware Attacks via Emotet and Trickbot Chain; North Korean (Lazarus) Attribution QuestionedHIGH2026-10-17