GINC-APT-0938 · Agency or leak

SILKFIN AGENCY

Category
Agency or leak · A state agency’s own unit, or a toolset known from a leak.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0938 · silkfin-agency

What it is

SILKFIN AGENCY has claimed responsibility for multiple significant data breaches, including the compromise of DimeCuba.com, which exposed over 1 million SMS records and more than 100,000 email records. They also targeted the Sri Lankan Department of Agrarian Development, allegedly compromising the personal and agricultural data of over 1.45 million farmers. Additionally, they claimed a breach of the Siam Cement Group's database. The breaches involved sensitive data such as NIC numbers and transaction details.

Tools

The tools and malware families the sources tie to it.

  • RTM

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de