WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. The actor name GRIM SPIDER was introduced into CrowdStrikes nomenclature in September 2018 for the group that operates Ryuk as a distinct sub-group of the WIZard SPIDER criminal enterprise. Ryuk is derived from the Hermes source code and has been under steady development since its release. Unlike Hermes, Ryuk has only been used to target enterprise environments.”]
Source: https://www.crowdstrike.com/blog/big-game-hunting-with-ryuk-another-lucrative-targeted-ransomware/