French version: 🇫🇷
SILENCE is a group of allegedly Russian-speaking, independent cybercriminals that has been on the scene since 2016. Initially it mostly targeted banks in CIS countries (such as Russia, Belarus, Moldova, Armenia and Kazakhstan) as well as Ukraine, but has since extended its reach to some thirty countries across Europe (Germany, Switzerland, the UK and Austria among them), Asia (including Israel, Turkey, Taiwan, Malaysia and South Korea) and Africa (e.g. Ghana and Kenya).
This report provides a synthesis of ANSSI’s knowledge on SILENCE and aims at helping financial institutions to protect themselves from this cybercriminal group.
Indicators of compromise are available on the page CERTFR-2020-IOC-002.