Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Whisper Spider
28
techniques
3
software
11,314
corpus matches
profile
Silence is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.
techniques
28 attributed · most-instrumented first
software
3 malware & tools attributed
Winexe
S0191
SDelete
S0195
Empire
S0363
read this carefully
11,314 corpus matches is not attribution
That count is indicators which exhibit techniques Silence is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+16 more techniques
showing 30 of 11,314
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.