Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Groups/G0091
MITRE ATT&CK Group

Silence (G0091)

Whisper Spider
ShareXLinkedInRedditHN

[Silence](https://attack.mitre.org/groups/G0091) is a financially motivated threat actor targeting financial institutions in different countries. The group was first seen in June 2016. Their main targets reside in Russia, Ukraine, Belarus, Azerbaijan, Poland and Kazakhstan. They compromised various banking systems, including the Russian Central Bank's Automated Workstation Client, ATMs, and card processing.(Citation: Cyber Forensicator Silence Jan 2019)(Citation: SecureList Silence Nov 2017)

▪Techniques used (28)

T1571Non-Standard PortT1053.005Scheduled TaskT1055Process InjectionT1547.001Registry Run Keys / Startup FolderT1059.005Visual BasicT1112Modify RegistryT1021.001Remote Desktop ProtocolT1125Video CaptureT1059.007JavaScriptT1218.001Compiled HTML FileT1072Software Deployment ToolsT1113Screen CaptureT1027.010Command ObfuscationT1569.002Service ExecutionT1090.002External ProxyT1553.002Code SigningT1105Ingress Tool TransferT1078Valid AccountsT1018Remote System DiscoveryT1003.001LSASS MemoryT1059.001PowerShellT1588.002ToolT1070.004File DeletionT1566.001Spearphishing AttachmentT1036.005Match Legitimate Resource Name or LocationT1204.002Malicious FileT1059.003Windows Command ShellT1106Native API

▪Software used (3)

S0363EmpiretoolS0191WinexetoolS0195SDeletetool
G0091on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.