G0105 · 10 ATT&CK techniques · 0 correlated reports

DarkVishnya

Aliases: None listed

DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.

Open interactive actor investigation

ATT&CK techniques

T1200
Hardware AdditionsT1588.002
ToolT1543.003
Windows ServiceT1046
Network Service DiscoveryT1135
Network Share DiscoveryT1110
Brute ForceT1219
Remote Access SoftwareT1059.001
PowerShellT1040
Network SniffingT1571
Non-Standard Port

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research