coldbraid

DarkVishnya

DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.

ATT&CK ID
G0105
Techniques
10
Tools
2

Techniques

Resource Development

Obtain Capabilities

Initial Access

Hardware Additions

Execution

Command and Scripting Interpreter

Persistence

Create or Modify System Process

Privilege Escalation

Create or Modify System Process

Credential Access

Network SniffingBrute Force

Discovery

Network SniffingNetwork Service DiscoveryNetwork Share Discovery

Command and Control

Remote Access ToolsNon-Standard Port

Software

PsExec · Winexe

MITRE ATT&CKAll threat actors