Silence
Also reported as Whisper Spider, Silence group, WHISPER SPIDER, Contract Crew, TEMP.TruthTeller and 2 other names.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
- T1003.001
- T1018
- T1021.001
- T1027.010
- T1036.005
- T1053.005
- T1055
- T1059.001
- T1059.003
- T1059.005
- T1059.007
- T1070.004
Show all 28 techniques Show fewer
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2008-4250 KEV
- CVE-2012-0507 KEV ransomware
- CVE-2013-0074 KEV ransomware
- CVE-2013-2551 KEV ransomware
- CVE-2014-6332 KEV
- CVE-2015-0313 KEV
- CVE-2015-2419 KEV
- CVE-2015-2545 KEV
- CVE-2016-0189 KEV ransomware
- CVE-2017-0143 KEV ransomware
- CVE-2017-0199 KEV ransomware
- CVE-2017-01996
Show all 30 CVEs Show fewer
- CVE-2017-0262 KEV
- CVE-2017-0263 KEV
- CVE-2017-11882 KEV ransomware
- CVE-2017-118827
- CVE-2017-8570 KEV
- CVE-2018-0802 KEV ransomware
- CVE-2018-4878 KEV ransomware
- CVE-2018-5407
- CVE-2018-8174 KEV ransomware
- CVE-2019-0752 KEV ransomware
- CVE-2020-0674 KEV
- CVE-2021-26411 KEV ransomware
- CVE-2021-35211 KEV ransomware
- CVE-2022-31199 KEV ransomware
- CVE-2023-27350 KEV ransomware
- CVE-2023-34362 KEV ransomware
- CVE-2024-1708 KEV ransomware
- CVE-2024-1709 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Silence, Contract Crew - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Silence, Contract Crew - Threat Group Cards: A Threat Actor Encyclopedia
-
Dissecting Malicious CHM Files and Performing Forensic Analysis – Cyber Forensicator
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Dissecting Malicious CHM Files and Performing Forensic Analysis – Cyber Forensicator
Show all 35 reports Show fewer
-
Breaking the silence - Recent Truebot activity
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Breaking the silence - Recent Truebot activity
-
TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer
The original link failed its last check. Original publisher Detailsfor TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer
-
TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TA505's Box of Chocolate - On Hidden Gems packed with the TA505 Packer
-
2019 Cyber Threatscape Report I Accenture
The original link failed its last check. Original publisher Detailsfor 2019 Cyber Threatscape Report I Accenture
-
How the Silence Downloader Has Evolved Over Time
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor How the Silence Downloader Has Evolved Over Time
-
Silence group targeting Russian Banks via Malicious CHM
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Silence group targeting Russian Banks via Malicious CHM
-
New Silence hacking group suspected of having ties to cyber-security industry
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Silence hacking group suspected of having ties to cyber-security industry
-
Silence: Moving into the darkside
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Silence: Moving into the darkside
Newest first. Details opens the report in Explore.