Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
10
techniques
2
software
8,790
corpus matches
profile
DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.
techniques
10 attributed · most-instrumented first
software
2 malware & tools attributed
PsExec
S0029
Winexe
S0191
read this carefully
8,790 corpus matches is not attribution
That count is indicators which exhibit techniques DarkVishnya is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
discovery
showing 30 of 8,790