Ransomware Group intelligence
SilentRansomGroup
ActiveTrack SilentRansomGroup with 158 published victims and 2 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
SilentRansomGroup is tracked by Breach House as a ransomware group with 158 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Web location | Down checked 3h ago | business-data-leaks.com |
| Leak location 2 | Web location | Down checked 3h ago | business-data-leaks.com |
Top Activity Sectors (11)
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue SilentRansomGroup, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: SilentRansomGroup executes malicious payloads via PowerShell scripts injected into legitimate processes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: SilentRansomGroup leverages Registry Run Keys to ensure malware execution upon system reboot.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: SilentRansomGroup disables antivirus tools by terminating security processes and modifying service configurations.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.016 Junk Code Insertion Stealth
What they do: SilentRansomGroup inserts junk code into legitimate binaries to evade static behavioral analysis.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: SilentRansomGroup deletes Volume Shadow Copies via vssadmin /delete to prevent data recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: SilentRansomGroup accesses LSASS memory using Mimikatz-like techniques to steal credentials for lateral movement.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: SilentRansomGroup scans network shares using net use commands to identify victim data for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1560.001 Archive via Utility Collection
What they do: SilentRansomGroup archives stolen insurance and financial records before exfiltration via utility tools.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1486 Data Encrypted for Impact Impact
What they do: SilentRansomGroup encrypts critical financial and legal documents using custom symmetric encryption routines.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: SilentRansomGroup triggers system shutdown commands to disrupt recovery operations and maximize impact.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (158)
Search, filter and paginate the victim timeline for SilentRansomGroup. Showing 101–158 of 158.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | IFG Companies id19916 View details | United States | Finance / Legal / Insurance | — | |
|
Founded in 1985, IFG Companies is a privately held insurance group based in Hartford, Connecticut. IFG… |
|||||
| Ransomware | Kisling Nestico & Redick id19915 View details | United States | Finance / Legal / Insurance | — | |
|
About Kisling, Nestico & Redick: Kisling, Nestico & Redick provides sophisticated injury law represent… |
|||||
| Ransomware | NCheng id19914 View details | United States | Communication / Marketing | — | |
|
NCheng LLP was founded in 1989 in New York City. Our practice is dedicated entirely to serve the not-f… |
|||||
| Ransomware | ADM LAW id19913 View details | United States | Finance / Legal / Insurance | — | |
|
Founded in 1983 and headquartered in New York, New York, Ahmuty, Demers & McManus (ADM) is a full-serv… |
|||||
| Ransomware | McCague Borlack id19912 View details | Canada | Finance / Legal / Insurance | — | |
|
Founded in 1994, McCague Borlack full service legal advice. Its practice areas include: accident benef… |
|||||
| Ransomware | First Financial Equity id19911 View details | United States | Finance / Legal / Insurance | — | |
|
First Financial Equity Corporations (FFEC) primary objective is to provide personalized customer servi… |
|||||
| Ransomware | Barst Mukamal & Kleiner id19910 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
Barst Mukamal & Kleiner LLP is an international immigration law firm based in New York City. Founded i… |
|||||
| Ransomware | Olinsky Law Group id19909 View details | United States | Finance / Legal / Insurance | — | |
|
Olinsky Law Group specializes in Social Security Disability, Appeals Council, Federal Court, and Long-… |
|||||
| Ransomware | Pembrook Group id19908 View details | United States | Construction / Real Estate | — | |
|
Founded in 2006 by Stuart J. Boesky, Pembrook Capital Management (Pembrook) is a real estate investmen… |
|||||
| Ransomware | Colucci Law Group id19907 View details | United States | Finance / Legal / Insurance | — | |
|
Colucci Law Group provides comprehensive legal support in Florida, focusing on areas such as property … |
|||||
| Ransomware | GreatFlorida Insurance Holding Corp. id19906 View details | United States | Finance / Legal / Insurance | — | |
|
Founded in 1991 and headquartered in West Palm Beach, Florida, GreatFlorida Insurance is a network of … |
|||||
| Ransomware | Paycor id19905 View details | United States | Communication / Marketing | — | |
|
Founded in 1990, Paycor is a human capital management company that provides HR and payroll technology … |
|||||
| Ransomware | Baxter Baker Sidle Conn & Jones id19904 View details | United States | Finance / Legal / Insurance | — | |
|
Baxter Baker is a legal firm based in Baltimore and Annapolis, Maryland, offering a range of services … |
|||||
| Ransomware | Chicago Atlantic Group id19903 View details | United States | Construction / Real Estate | — | |
|
Chicago Atlantic Real Estate Finance, Inc. (Chicago Atlantic) is a commercial real estate finance comp… |
|||||
| Ransomware | Mauldin & Jenkins id19902 View details | United States | Finance / Legal / Insurance | — | |
|
Mauldin & Jenkins has provided audit, accounting, tax, and consulting services since 1918. Our culture… |
|||||
| Ransomware | Miller Canfield id19901 View details | United States | Finance / Legal / Insurance | — | |
|
Miller Canfield, headquartered in Detroit, Michigan, is a law firm that provides services for bankrupt… |
|||||
| Ransomware | CRC Group id19900 View details | United States | Finance / Legal / Insurance | — | |
|
CRC Group is a wholesale and specialty insurance distributor in the United States. Founded in 1914, th… |
|||||
| Ransomware | 44North id19899 View details | United States | Healthcare / Pharma | — | |
|
44North, headquartered in Cadillac, Michigan, provides health benefit consulting and plan design. Thei… |
|||||
| Ransomware | EW Smith Insurance Agency id19898 View details | United States | Communication / Marketing | — | |
|
If longevity is a trusted sign of success, the E.W. Smith Insurance Agency proves to be one of Wyandot… |
|||||
| Ransomware | Anders CPAs + Advisors id19897 View details | United States | Finance / Legal / Insurance | — | |
|
Accounting Services Founded in 1965, Anders is headquartered in St. Louis, Missouri. They are a CPA… |
|||||
| Ransomware | Black , Bashor & Porsch id19896 View details | United States | Finance / Legal / Insurance | — | |
|
Accounting Services |
|||||
| Ransomware | Shea Barclay Group id19895 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
Insurance |
|||||
| Ransomware | ATLAS CPAs & Advisors id19894 View details | United States | Finance / Legal / Insurance | — | |
|
Accounting Services |
|||||
| Ransomware | Klehr Harrison Harvey Branzburg id19893 View details | United States | Finance / Legal / Insurance | — | |
|
Law Firms & Legal Services |
|||||
| Ransomware | Inspere Insurance Solutions id19892 View details | United States | Finance / Legal / Insurance | — | |
|
Insphere Insurance Solutions, Inc. is one of the fastest growing insurance distribution companies in A… |
|||||
| Ransomware | Cross Valley FCU id19891 View details | United States | Finance / Legal / Insurance | — | |
|
Established in 1969, Cross Valley Federal Credit Union is headquartered in Wilkes-Barre, Pennsylvania.… |
|||||
| Ransomware | Metro Public Adjustment id19890 View details | United States | Public Sector | — | |
|
Since 1994, Metro Public Adjustment, Inc. has been an advocate for the rights of you, the property own… |
|||||
| Ransomware | Palomar Insurance id19889 View details | United States | Finance / Legal / Insurance | — | |
|
Palomar Insurance Corporation delivers tailored insurance programs to small and large companies in the… |
|||||
| Ransomware | Liberty Tax Service Inc id19888 View details | United States | Communication / Marketing | — | |
|
Liebert Cassidy Whitmore provides legal advisory services. The firms practice areas include labor rela… |
|||||
| Ransomware | Kotz Sangster Wysocki id19887 View details | United States | Finance / Legal / Insurance | — | |
|
Law Firms & Legal Services |
|||||
| Ransomware | Marriott International Inc id19886 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
Marriott International, Inc. operates, franchises, and licenses hotels and timeshare properties worldw… |
|||||
| Ransomware | Cantey Hanger LLP id19885 View details | United States | Other | — | |
|
Cantey Hanger LLP, established in 1882, is a full-service firm based in Texas, with offices in Fort Wo… |
|||||
| Ransomware | JMJ Associates id19884 View details | United States | Services | — | |
|
JMJ Associates, LLC provides management consulting services primarily for the energy, mining, and cons… |
|||||
| Ransomware | Prime Consulting Group id19883 View details | Communication / Marketing | — | ||
|
Prime Consulting Group, Inc. is a full-service property and casualty insurance services company |
|||||
| Ransomware | Ball Eggleston Law Firm id19882 View details | United States | Finance / Legal / Insurance | — | |
|
Ball Eggleston is a full-service law firm providing legal services for many types of cases, including … |
|||||
| Ransomware | Tetra Technologies Inc id19881 View details | United States | IT | — | |
|
TETRA Technologies delivers leading solutions to the upstream energy industry for completions fluids, … |
|||||
| Ransomware | Lincoln Investment Planning LLC id19880 View details | United States | Finance / Legal / Insurance | — | |
|
Lincoln Investment was founded in 1968. This company provides investment advice and banking services. … |
|||||
| Ransomware | Quintairos Prieto Wood & Boyer PA id19879 View details | United States | Communication / Marketing | — | |
|
Founded in 2006 and headquartered in Miami, Florida, Quintairos Prieto Wood & Boyer, P.A. is a law fir… |
|||||
| Ransomware | Bass , Berry & Sims PLC id19878 View details | United States | Finance / Legal / Insurance | — | |
|
Bass, Berry & Sims is poised to guide clients through complex legal matters.Focused on their interests… |
|||||
| Ransomware | Essex Property Trust id19877 View details | United States | Construction / Real Estate | — | |
|
Established in 1987, ESSEX REALTY MANAGEMENT is a privately owned real estate management and investmen… |
|||||
| Ransomware | Davenport & Company LLC id19876 View details | United States | Finance / Legal / Insurance | — | |
|
Davenport offers a wide range of investment services for individuals, corporations, institutions, and … |
|||||
| Ransomware | AG Adjustment id19875 View details | United States | Retail / E-commerce | — | |
|
AG Adjustments is a commercial collection agency. It offers small business B2B debt collection, AR man… |
|||||
| Ransomware | Jacobs Entertainment Inc id19874 View details | United States | Services | — | |
|
Jacobs Entertainment, Inc. (JEI) is a developer, owner and operator of gaming and entertainment facili… |
|||||
| Ransomware | McCague Borlack LLP id19873 View details | Canada | Finance / Legal / Insurance | — | |
|
Litigation Law Firm - We are one of Toronto's leading litigation law firms with regional offices in Ba… |
|||||
| Ransomware | Lane Gorman Trubitt id19872 View details | United States | Finance / Legal / Insurance | — | |
|
Founded in 1950, Lane Gorman Trubitt, PLLC (LGT) is one of the largest certified public accounting fir… |
|||||
| Ransomware | AGT Slots id19871 View details | United States | Services | — | |
|
Founded in 1995, Ainsworth Game Technology is a manufacturer and supplier of gaming solutions speciali… |
|||||
| Ransomware | Integrity Home Mortgage Company id19870 View details | United States | Finance / Legal / Insurance | — | |
|
Founded in 2005, Integrity Home Mortgage is a financial service company specializing in home purchases… |
|||||
| Ransomware | Hannover Re id19869 View details | Germany | Finance / Legal / Insurance | — | |
|
Hannover Re, headquartered in Hannover, Germany, and established in 1966, is a reinsurance company spe… |
|||||
| Ransomware | TWFG Insurance id19868 View details | United States | Finance / Legal / Insurance | — | |
|
TWFG Insurance services the Lagrange area and throughout the state of Georgia. At TWFG Insurance, thei… |
|||||
| Ransomware | Geocon Inc. id19867 View details | United States | Manufacturing / Engineering | — | |
|
Geocon Inc. REVENUE: $63M TOTAL DOWNLOADS: 162 COMPANY INFO: Architecture, Engineering & Design · California, United States · 289 Employees. Founded in 1971, Ge… |
|||||
| Ransomware | Liebert Cassidy Whitmore Attorneys id19866 View details | United States | Finance / Legal / Insurance | — | |
|
REVENUE: $82M TOTAL DOWNLOADS: 164 COMPANY INFO: Liebert Cassidy Whitmore is California's premier labor, education, and employment law firm. We provide… |
|||||
| Ransomware | Rosenbauer America id19865 View details | United States | Other | — | |
|
Rosenbauer America TOTAL DOWNLOADS: 157 COMPANY INFO: Rosenbauer is the world's leading manufacturer of firefighting vehicles and equipment. In North Americ… |
|||||
| Ransomware | Haynie & Company PC id19864 View details | United States | Public Sector | — | |
|
REVENUE: $57.5M TOTAL DOWNLOADS: 165 COMPANY INFO: Haynie & Company was founded in 1960 and is headquartered in Salt Lake City. They offer tax services, … |
|||||
| Ransomware | Williams, Kastner & Gibbs PLLC id19863 View details | United States | Services | — | |
|
REVENUE: $25.2M TOTAL DOWNLOADS: 172 COMPANY INFO: Williams Kastner provides legal advisory services. The firm focuses on areas including federal litigat… |
|||||
| Ransomware | Sanchez Daniels & Hoffman LLP id19862 View details | United States | Finance / Legal / Insurance | — | |
|
REVENUE: $18.9M STATUS: LEAKED DOWNLOAD LINK: > Click to download < TOTAL DOWNLOADS: 159 COMPANY INFO: Sanchez Daniels & Hoffman LLP is a full service civil practice law firm with the top AV Martindale-Hub… |
|||||
| Ransomware | Managed Benefits Advisors LLC id19861 View details | United States | Communication / Marketing | — | |
|
REVENUE: $7.4M STATUS: LEAKED DOWNLOAD LINK: > Click to download < TOTAL DOWNLOADS: 160 COMPANY INFO: Managed Benefits, Inc. (MBI) is a privately owned consulting firm serving the Mid-Atlantic States and … |
|||||
| Ransomware | Ted A Greve & Associates PA id19860 View details | United States | Communication / Marketing | — | |
|
REVENUE: $6.5M STATUS: LEAKED DOWNLOAD LINK: > Click to download < TOTAL DOWNLOADS: 160 COMPANY INFO: he law firm of Ted A. Greve & Associates, P.A. is dedicated to providing professional and personalized… |
|||||
| Ransomware | Jardim, Meisner & Susser PC id19859 View details | United States | Finance / Legal / Insurance | — | |
|
REVENUE: $6.2M STATUS: LEAKED DOWNLOAD LINK: > Click to download < TOTAL DOWNLOADS: 162 COMPANY INFO: Law firm |
|||||