Silence

Overview

Silence is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.

TTPs — 28 techniques across 11 tactics

Tools & malware (3)

Empire · Winexe · SDelete

Reporting (3)

• 2020 Global Threat Report — Crowdstrike
• Silence: Dissecting Malicious CHM Files and Performing Forensic Analysis — Skulkin, O.
• Silence – a new Trojan attacking financial organizations — GReAT