← threatfilter.dev / all groups / DarkVishnya

DarkVishnya

Overview

DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.

TTPs — 10 techniques across 7 tactics

Resource Development

T1588.002 Tool

Initial Access

T1200 Hardware Additions

Execution

T1059.001 PowerShell

Tools & malware (2)

Winexe · PsExec

Reporting (1)

DarkVishnya: Banks attacked through direct connection to local network — Golovanov, S

Overview

TTPs — 10 techniques across 7 tactics

Resource Development

Initial Access

Execution

Persistence

Credential Access

Discovery

Command and Control

Tools & malware (2)

Reporting (1)