SilverFish is a cyber-espionage group that emerged in December 2020, characterized by its highly organized, disciplined, and compartmentalized operational structure, suggesting a structured approach to covert cyber-espionage. The group is assessed with high confidence to be of Russian origin, indicated by Russian language observed on their command and control servers and a pattern of avoiding attacks on former USSR countries closely allied with Russia. Their primary motivation is covert reconnaissance and data exfiltration from high-value targets, primarily within critical infrastructure in the US and Europe. A distinctive characteristic of SilverFish is its use of a unique malware testing sandbox, built from actual enterprise victim systems, which allows them to test malicious payloads against various antivirus and EDR solutions in real-time. The group also distinguishes itself by using hacked domains for command and control redirection, often creating new subdomains to evade detectio

Aliases del actor

Dark HaloNobeliumSilver Fishla penetración de sistemas críticosBlueBravoNOBELIUMdark halogoldfindergoldmaxraindropsibotsolorigatestellarparticlesunburstsunshuttle

Actores similares

alphalockerthreat-actor · 3darkracethreat-actor · 2darkangelsthreat-actor · 2darkbitthreat-actor · 2darkleakmarketthreat-actor · 2darkpowerthreat-actor · 2darkvaultthreat-actor · 2darkuniverseactor · 1dark-pinkactor · 1darkhydrusactor · 1