Home / Threat actors / DarkVishnya
DarkVishnya G0105
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
12
Techniques
2
Malware and tools
DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Initial Access
T1200 Hardware Additions Execution
T1059.001 PowerShell Persistence
T1543.003 Windows Service Privilege Escalation
T1543.003 Windows Service Credential Access
T1040 Network SniffingT1110 Brute Force Discovery
T1040 Network SniffingT1046 Network Service DiscoveryT1135 Network Share Discovery Command and Control
T1219 Remote Access ToolsT1571 Non-Standard Port © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.