Trusted Design

Silence

G0091 · MITRE Pageへのリンク

脅威アクターの詳細

[Silence](https://attack.mitre.org/groups/G0091) is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.(Citation: Cyber Forensicator Silence Jan 2019)(Citation: SecureList Silence Nov 2017)

別名・別称

Silence
Whisper Spider

利用した攻撃手法

• T1053.005 - Scheduled Task
• T1113 - Screen Capture
• T1059.007 - JavaScript
• T1036.005 - Match Legitimate Resource Name or Location
• T1204.002 - Malicious File
• T1566.001 - Spearphishing Attachment
• T1553.002 - Code Signing
• T1106 - Native API
• T1055 - Process Injection
• T1112 - Modify Registry
• T1003.001 - LSASS Memory
• T1090.002 - External Proxy
• T1125 - Video Capture
• T1072 - Software Deployment Tools
• T1059.001 - PowerShell
• T1547.001 - Registry Run Keys / Startup Folder
• T1588.002 - Tool
• T1218.001 - Compiled HTML File
• T1078 - Valid Accounts
• T1571 - Non-Standard Port
• T1059.003 - Windows Command Shell
• T1027.010 - Command Obfuscation
• T1070.004 - File Deletion
• T1059.005 - Visual Basic
• T1018 - Remote System Discovery
• T1105 - Ingress Tool Transfer
• T1021.001 - Remote Desktop Protocol
• T1569.002 - Service Execution

関連するCVE (攻撃手法に関連)

• CVE-2013-3906 (T1027.010)
• CVE-2014-0322 (T1569.002)
• CVE-2015-2419 (T1218.001)
• CVE-2016-0189 (T1059.005)
• CVE-2014-4114 (T1569.002)
• CVE-2015-1770 (T1569.002)
• CVE-2015-2545 (T1569.002)
• CVE-2017-0199 (T1569.002)
• CVE-2012-0158 (T1569.002)
• CVE-2014-6352 (T1569.002)
• CVE-2015-0016 (T1078)
• CVE-2010-3333 (T1204.002)
• CVE-2010-0188 (T1059.003)
• CVE-2010-2884 (T1059.003)
• CVE-2013-0640 (T1059.003)
• CVE-2011-0611 (T1059.003)
• CVE-2010-1553 (T1566.001)
• CVE-2014-1761 (T1218.001)
• CVE-2015-2853 (T1566.001)
• CVE-2017-16929 (T1566.001)
• CVE-2012-1876 (T1218.001)
• CVE-2012-2539 (T1218.001)
• CVE-2013-3660 (T1078)
• CVE-2013-7331 (T1569.002)
• CVE-2009-3129 (T1218.001)
• CVE-2013-5990 (T1218.001)
• CVE-2015-2546 (T1078)
• CVE-2015-5897 (T1078)
• CVE-2015-4495 (T1078)
• CVE-2014-4113 (T1569.002)
• CVE-2015-1701 (T1569.002)
• CVE-2017-0263 (T1078)
• CVE-2013-6282 (T1106)
• CVE-2014-8361 (T1106)
• CVE-2015-0057 (T1569.002)
• CVE-2015-2360 (T1569.002)
• CVE-2014-4148 (T1569.002)
• CVE-2010-0232 (T1078)
• CVE-2010-4398 (T1078)
• CVE-2012-6422 (T1078)
• CVE-2012-1856 (T1569.002)
• CVE-2014-6332 (T1569.002)
• CVE-2012-4792 (T1105)
• CVE-2014-4322 (T1078)
• CVE-2013-2595 (T1078)
• CVE-2016-6532 (T1003.001)
• CVE-2008-1436 (T1569.002)
• CVE-2016-1898 (T1218.001)
• CVE-2016-1897 (T1218.001)
• CVE-2012-4969 (T1569.002)
• CVE-2015-2502 (T1569.002)
• CVE-2014-6271 (T1059.003)
• CVE-2015-2854 (T1218.001)
• CVE-2015-6036 (T1218.001)
• CVE-2015-6022 (T1218.001)
• CVE-2012-0507 (T1218.001)
• CVE-2013-2551 (T1218.001)
• CVE-2014-1776 (T1078)
• CVE-2010-0806 (T1105)
• CVE-2010-1297 (T1059.003)
• CVE-2011-3402 (T1218.001)
• CVE-2010-2883 (T1059.003)
• CVE-2014-7247 (T1218.001)
• CVE-2013-0641 (T1059.003)
• CVE-2014-3897 (T1218.001)
• CVE-2011-1255 (T1078)
• CVE-2025-55183 (T1078)
• CVE-2015-3456 (T1078)
• CVE-2013-2094 (T1078)
• CVE-2015-7808 (T1078)
• CVE-2016-1990 (T1078)
• CVE-2016-1019 (T1078)
• CVE-2015-3628 (T1078)
• CVE-2015-6034 (T1078)
• CVE-2015-7262 (T1078)
• CVE-2016-9496 (T1078)
• CVE-2012-0056 (T1078)
• CVE-2010-3081 (T1078)
• CVE-2012-1258 (T1078)
• CVE-2014-3153 (T1078)
• CVE-2015-3636 (T1078)
• CVE-2012-4681 (T1078)
• CVE-2015-1761 (T1078)
• CVE-2014-6324 (T1078)
• CVE-2010-0738 (T1078)
• CVE-2015-2387 (T1078)
• CVE-2017-0001 (T1078)
• CVE-2023-1389 (T1018)
• CVE-2025-13927 (T1078)
• CVE-2025-13928 (T1078)
• CVE-2025-24893 (T1078)
• CVE-2025-31125 (T1078)
• CVE-2025-68645 (T1078)
• CVE-2026-1102 (T1078)
• CVE-2026-20127 (T1078)
• CVE-2025-13335 (T1571)
• CVE-2015-0097 (T1059.005)
• CVE-2017-0261 (T1018)
• CVE-2017-0262 (T1018)
• CVE-2017-8570 (T1059.005)
• CVE-2017-0143 (T1569.002)
• CVE-2015-5122 (T1018)
• CVE-2015-3043 (T1018)
• CVE-2015-0359 (T1018)
• CVE-2014-8440 (T1018)
• CVE-2017-7255 (T1018)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る