SPIKEDWINE
Intelligence Profile
SPIKEDWINE is a threat actor targeting European officials with a new backdoor called WINELOADER. They use a bait PDF document posing as an invitation letter from the Ambassador of India to lure diplomats. The attack is characterized by advanced tactics, techniques, and procedures in the malware and command and control infrastructure. The motivation behind the attacks seems to be exploiting the geopolitical relations between India and European nations.
Threat Analysis
SPIKEDWINE is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of hacktivism.
As a hacktivist-aligned entity, SPIKEDWINE conducts operations driven by ideological, political, or social grievances, typically through website defacements, DDoS attacks, and the leaking of sensitive data to advance a public narrative.