SilverTerrier

· ATT&CK GroupG0083

Techniques

Software

Tactics

Aliases

Description

SilverTerrier is a Nigerian threat group that has been seen active since 2014. SilverTerrier mainly targets organizations in high technology, higher education, and manufacturing.(Citation: Unit42 SilverTerrier 2018)(Citation: Unit42 SilverTerrier 2016)

Tactic Coverage

command and control (3)impact (1)

Techniques Used (4)

T1071.001Web Protocols

command and control

T1071.002File Transfer Protocols

command and control

T1071.003Mail Protocols

command and control

T1657Financial Theft

impact

Software Used (5)

S0331Agent Teslamalware S0334DarkCometmalware S0447Lokibotmalware S0198NETWIREmalware S0336NanoCoremalware

References (4)

https://attack.mitre.org/groups/G0083 https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/Unit_42/silverterrier-next-evolution-in-nigerian-cybercrime.pdf https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/unit42-silverterrier-rise-of-nigerian-business-email-compromise