{"id":35838,"date":"2019-07-12T17:08:08","date_gmt":"2019-07-12T09:08:08","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=35838"},"modified":"2019-07-12T17:08:11","modified_gmt":"2019-07-12T09:08:11","slug":"kaspersky-silence-apt-group-expands-hacking-targets-moving-activity-outside-the-cis-region","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2019\/07\/12\/kaspersky-silence-apt-group-expands-hacking-targets-moving-activity-outside-the-cis-region\/","title":{"rendered":"Kaspersky: Silence APT group expands hacking targets, moving activity outside the CIS region"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Kaspersky has been monitoring malicious activities from hacking group Silence APT for several years, with the first public report on the threat actor\u2019s tools and techniques being made <\/strong><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/securelist.com\/the-silence\/83009\/\"><strong>available<\/strong><\/a><strong> in the autumn of 2017.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The group\u2019s activity has remained stable since the report was launched \u2013 apart from occasional modifications of anti-emulation and anti-detection techniques. However, since the beginning of 2019, Kaspersky\u2019s experts have noticed a worrisome trend: an increase in the number of financial organizations outside the CIS region being targeted by the group. In particular, new victims have emerged in APAC countries \u2013 including Bangladesh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Silence is a Russian-speaking hacking group, known for targeting financial organizations. It is among the most devastating and complex cyber-robbery operations \u2013 like Metel, or Carbanak. Most of these groups\u2019 operations share similar techniques to gain persistent access to banking networks for a long period and then monitor internal activities to use that knowledge to steal as much money as possible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Silence in particular tends to compromise its victim\u2019s infrastructure via spear phishing emails.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Take the following measures in order to protect networks from possible breaches:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>As many targeted attacks it start with phishing or other social engineering techniques, introduce <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/enterprise-security\/security-awareness\">security awareness training<\/a> to teach employees practical skills<\/li><li>For endpoint level detection, investigation and timely remediation of incidents, implement EDR solutions such as <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/enterprise-security\/endpoint-detection-response-edr\">Kaspersky Endpoint Detection and Response<\/a><\/li><li>In addition to adopting essential endpoint protection, implement a corporate-grade security solution that detects advanced threats on the network level at an early stage, such as <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/enterprise-security\/anti-targeted-attack-platform\">Kaspersky Anti Targeted Attack Platform<\/a><\/li><li>Provide your SOC team with access to the latest <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/enterprise-security\/threat-intelligence\">Threat Intelligence<\/a> datasheets, to keep up to date with new and emerging tools, techniques and tactics used by threat actors<\/li><li>For better ATM protection, use a proper security solution. Outdated ATMs, which have outdated protection or even lack it at all, also require a solution against modern threats. This is developed by taking into account the specific protection needed on different devices, found in solutions such as <a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/enterprise-security\/embedded-systems\">Kaspersky Embedded System Security<\/a>. It enables segregation of rights, meaning that even a local IT specialist cannot change the security settings of the solution and turn off the protection<\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Silence is a Russian-speaking hacking group, known for targeting financial organizations. It is among the most devastating and complex cyber-robbery operations \u2013 like Metel, or Carbanak.<\/p>\n","protected":false},"author":6,"featured_media":35534,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[101,54],"class_list":["post-35838","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-kaspersky","tag-security"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/35838","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=35838"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/35838\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/35534"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=35838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=35838"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=35838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}