SilverFish
- Primary motivation
- espionage
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:10:08
Targeted industries: government-and-public-sector technology-and-telecommunications financial-services
Context
SilverFish is believed to be a Russian cyberespionage group that has been involved in various cyberattacks, including the use of the SolarWinds breach as an attack vector. SilverFish has been linked to the Wasted Locker ransomware and has displayed a high level of skill and organization in their cyber operations. There are also connections between SilverFish and the threat actor Evil Corp, suggesting a possible evolution or collaboration between the two groups.
Reports & references
- truesec.com — Are The Notorious Cyber Criminals Evil Corp Actually Russian Spies (report)
- prodaft.com — Silverfish Global Cyber Espionage Campaign Case Report (report)
- Mandiant — Unc2165 Shifts To Evade Sanctions (report)