MoneyTaker

Linked to Russia by one source.

Reports: 11
Last reported: 29 April 2026
Known CVEs: 49
Origin: Russia

ID: moneytaker
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2017 Q4: 5 reports
2018 Q1: no reports
2018 Q2: no reports
2018 Q3: 2 reports
2018 Q4: no reports
2019 Q1: 1 report
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: 2 reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2017 Q4 to 2026 Q2.

CVEs named in reports

Show all 49 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

29 April 2026

Silence: Moving into the darkside

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Silence: Moving into the darkside
9 December 2019

Group-IB_Hi-Tech_Crime_Trends_2019-2020_en

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020_en
29 November 2019

Group-IB_Hi-Tech_Crime_Trends_2019-2020

date in the CCS '25 data Group-IB fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020
12 February 2019

2018 Master Table

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 2018 Master Table
5 September 2018

Silence: Moving into the Darkside

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Silence: Moving into the Darkside
4 September 2018

Silence: Moving into the darkside

date in the CCS '25 data Group-IB fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Silence: Moving into the darkside
12 December 2017

MoneyTaker Hacker Group Steals Millions from US and Russian Banks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor MoneyTaker Hacker Group Steals Millions from US and Russian Banks
12 December 2017

MoneyTaker Hacker Group Steals Millions from US and Russian Banks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoneyTaker Hacker Group Steals Millions from US and Russian Banks
11 December 2017

MoneyTaker- in pursuit of the invisible

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoneyTaker- in pursuit of the invisible
11 December 2017

Group-IB_MoneyTaker_report

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_MoneyTaker_report

Show all 11 reports Show fewer

11 December 2017

MoneyTaker: in pursuit of the invisible

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor MoneyTaker: in pursuit of the invisible

Newest first. Details opens the report in Explore.