DarkVishnya — APT Profile

DarkVishnya is a financially motivated threat actor targeting financial institutions in Eastern Europe. In 2017-2018 the group attacked at least 8 banks in this region.

Tools & malware

PsExec Remote Execution
Winexe Remote Execution

Vendor research

DarkVishnya: Banks attacked through direct connection to local network Securelist

Read the full analysis on IntelFusions