← Back to Actors
Silence
SilenceWhisper Spider
[Silence](https://attack.mitre.org/groups/G0091) is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.(Citation: Cyber Forensicator Silence Jan 2019)(Citation: SecureList Silence Nov 2017)
28
Techniques
28
Covered
0
Gaps
100%
Coverage
Coverage28/28
COVERED (28)
T1003.001LSASS Memory111 det.T1018Remote System Discovery52 det.T1021.001Remote Desktop Protocol55 det.T1027.010Command Obfuscation42 det.T1036.005Match Legitimate Resource Name or Location49 det.T1053.005Scheduled Task100 det.T1055Process Injection83 det.T1059.001PowerShell384 det.T1059.003Windows Command Shell89 det.T1059.005Visual Basic71 det.T1059.007JavaScript64 det.T1070.004File Deletion46 det.T1072Software Deployment Tools13 det.T1078Valid Accounts320 det.T1090.002External Proxy9 det.T1105Ingress Tool Transfer199 det.T1106Native API30 det.T1112Modify Registry208 det.T1113Screen Capture19 det.T1125Video Capture3 det.T1204.002Malicious File468 det.T1218.001Compiled HTML File14 det.T1547.001Registry Run Keys / Startup Folder53 det.T1553.002Code Signing4 det.T1566.001Spearphishing Attachment1144 det.T1569.002Service Execution65 det.T1571Non-Standard Port17 det.T1588.002Tool13 det.