HackerFeeds
All ransomware groups

silentransomgroup

191 tracked victims
·first seen 2022-06-07·last activity 2026-11-05

Activity analysis

HackerFeeds has tracked 197 victims claimed by silentransomgroup since June 2022, most recently in November 2026 — ranking #35 of 332 groups (0.6% of all tracked ransomware victims). It posted 78 victims in the last 90 days, up 875% on the previous 90 days (8). Its most-targeted sector is Business Services (63 victims), followed by Financial Services (42). The United States accounts for 133 victims (94% of those with a known location); 56 victims did not disclose a location.

Victims per year

  • 20221
  • 202431
  • 202549
  • 2026116

Top sectors

  • Business Services63
  • Financial Services42
  • Professional Services33
  • Hospitality and Tourism3
  • Technology1
  • Manufacturing1

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

A former Conti team aka Chatty Spider and UNC3753

MITRE ATT&CK TTPs

TA0001

Initial Access

  • T1078Valid Accounts

    Threat actors may leverage victim credentials to access email or cloud services

  • T1566Phishing

    Callback phishing emails using invoice, billing, subscription, or IT-themed lures

TA0009

Collection

  • T1530Data from Cloud Storage

    Theft of data from Microsoft 365, OneDrive, Google Drive, or similar platforms

  • T1560Archive Collected Data

    Data may be staged or compressed prior to exfiltration

TA0010

Exfiltration

  • T1052.001Exfiltration over USB

    In-person intrusion scenarios involving USB or external hard drive data theft

  • T1567Exfiltration Over Web Service

    Upload of stolen data to cloud storage or web-accessible platforms

TA0011

Command and Control

  • T1219Remote Access Tools

    Legitimate remote administration tools used to establish interactive access

TA0040

Impact

  • T1657Financial Theft

    Threatened publication or sale of stolen victim data

TA0043

Reconnaissance

  • T1598.004Spearphishing Voice

    Threat actors direct victims to initiate phone contact or impersonate internal IT support

Recent victims

No victims tracked yet.