SilverFish is a cyber-espionage group that emerged in December 2020, characterized by its highly organized, disciplined, and compartmentalized operational structure, suggesting a structured approach to covert cyber-espionage. The group is assessed with high confidence to be of Russian origin, indicated by Russian language observed on their command and control servers and a pattern of avoiding attacks on former USSR countries closely allied with Russia. Their primary motivation is covert reconnaissance and data exfiltration from high-value targets, primarily within critical infrastructure in the US and Europe. A distinctive characteristic of SilverFish is its use of a unique malware testing sandbox, built from actual enterprise victim systems, which allows them to test malicious payloads against various antivirus and EDR solutions in real-time. The group also distinguishes itself by using hacked domains for command and control redirection, often creating new subdomains to evade detectio

Aliases del actor

BlueBravoNOBELIUMdark halogoldfindergoldmaxraindropsibotsolorigatestellarparticlesunburstsunshuttleDark HaloNobeliumSilver Fishla penetración de sistemas críticos

Actores similares

DarkWebInformeractor · 11DailyDarkWebactor · 11alphalockeractor · 3darkangelsransomware · 2darkbitransomware · 2darkleakmarketransomware · 2darkraceransomware · 2darkpowerransomware · 2darkvaultransomware · 2apt-darkcaracalactor · 1