← Back to Actors
Silence
SilenceWhisper Spider
[Silence](https://attack.mitre.org/groups/G0091) is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.(Citation: Cyber Forensicator Silence Jan 2019)(Citation: SecureList Silence Nov 2017)
28
Techniques
28
Covered
0
Gaps
100%
Coverage
Coverage28/28
COVERED (28)
T1003.001LSASS Memory111 det.T1018Remote System Discovery51 det.T1021.001Remote Desktop Protocol53 det.T1027.010Command Obfuscation38 det.T1036.005Match Legitimate Resource Name or Location45 det.T1053.005Scheduled Task100 det.T1055Process Injection81 det.T1059.001PowerShell372 det.T1059.003Windows Command Shell83 det.T1059.005Visual Basic69 det.T1059.007JavaScript63 det.T1070.004File Deletion43 det.T1072Software Deployment Tools13 det.T1078Valid Accounts297 det.T1090.002External Proxy8 det.T1105Ingress Tool Transfer184 det.T1106Native API29 det.T1112Modify Registry203 det.T1113Screen Capture18 det.T1125Video Capture3 det.T1204.002Malicious File441 det.T1218.001Compiled HTML File14 det.T1547.001Registry Run Keys / Startup Folder53 det.T1553.002Code Signing4 det.T1566.001Spearphishing Attachment979 det.T1569.002Service Execution64 det.T1571Non-Standard Port17 det.T1588.002Tool13 det.