CybercrimeMITRE G0105
DarkVishnya
0mentions, 7 days
0mentions, 30 days
nonelast mentioned
Dubbed DarkVishnya, the attacks targeted at least eight banks using readily-available gear such as netbooks or inexpensive laptops, Raspberry Pi mini-computers, or a Bash Bunny - a USB-sized piece hardware for penetration testing purposes that can pose as a keyboard, flash storage, network adapter, or as any serial device.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
ATT&CK techniques
T1040 Network SniffingT1046 Network Service DiscoveryT1059.001 PowerShellT1110 Brute ForceT1135 Network Share DiscoveryT1200 Hardware AdditionsT1219 Remote Access ToolsT1543.003 Windows ServiceT1571 Non-Standard PortT1588.002 Tool
Recent activity
No posts or advisories have named this actor recently.
References
- https://www.bleepingcomputer.com/news/security/netbooks-rpis-and-bash-bunny-gear-attacking-banks-from-the-inside/
- https://attack.mitre.org/groups/G0105
- https://securelist.com/darkvishnya/89169/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.