MITRE ATT&CKgroup
G0105 DarkVishnya
- Domain
- enterprise
- Version
- 1.1
- Created
- 2020-05-15
Description
DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.
Related
Uses · MITRE ATT&CK (12)
- T1588.002 Tool sub-technique
- T1571 Non-Standard Port technique
- T1059.001 PowerShell sub-technique
- T1543.003 Windows Service sub-technique
- S0191 Winexe software (tool)
- T1200 Hardware Additions technique
- T1219 Remote Access Tools technique
- T1135 Network Share Discovery technique
- S0029 PsExec software (tool)
- T1040 Network Sniffing technique
- T1046 Network Service Discovery technique
- T1110 Brute Force technique
References
- https://securelist.com/darkvishnya/89169/ Securelist DarkVishnya Dec 2018