Threat Actor

SilverTerrier

Also known as: SilverTerrier

SilverTerrier is a Nigerian threat group that has been seen active since 2014. SilverTerrier mainly targets organizations in high technology, higher education, and manufacturing.

4
Techniques
5
Software
0
indicators on this record

Properties

Last source
MITRE ATT&CK
STIX ID
intrusion-set--76565741-3452-4069-ab08-80c0ea95bbeb
In Signal since
initial import (Sep 2026)
Retrieved at
2026-11-02T12:53:29+00:00
Type
intrusion-set

MITRE ATT&CK Techniques (4)

▸
File Transfer Protocols (T1071.002)

Adversaries may communicate using application layer protocols associated with transferring files to avoid detection/network filtering by blending in w

▸
Financial Theft (T1657)

Adversaries may steal monetary resources from targets through extortion, social engineering, technical theft, or other methods aimed at their own fina

▸
Mail Protocols (T1071.003)

Adversaries may communicate using application layer protocols associated with electronic mail delivery to avoid detection/network filtering by blendin

▸
Web Protocols (T1071.001)

Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with exi

Software & Tools (5)

▸
Agent Tesla [malware]

Agent Tesla is a spyware Trojan written for the.NET framework that has been observed since at least 2014.(

▸
DarkComet [malware]

DarkComet is a Windows remote administration tool and backdoor.(C

▸
LokiBot [malware]

Lokibot is a widely distributed information stealer that was first reported in 2015. It is designed to stea

▸
NETWIRE [malware]

NETWIRE is a publicly available, multiplatform remote administration tool (RAT) that has been used by crimi

▸
NanoCore [malware]

NanoCore is a modular remote access tool developed in.NET that can be used to spy on victims and steal inf

Explore this actor's full graph with Ninja Signal

SilverTerrier — Threat Actor Profile — Ninja Signal | Ninja Signal