Risk Letters
About Sign in ENDA

Threat actor

Silent Ransom Group

TLP:CLEAR

Facts

  • Also known as: Luna Moth, Silent Ransom, TG2729
  • Motivation: Financial
  • Malware and tools: AnyDesk, Bomgar, Rclone, WinSCP, Zoho Assist
  • Techniques (MITRE ATT&CK): Valid Accounts, Phishing, Data from Cloud Storage, Archive Collected Data, Exfiltration over USB, Exfiltration Over Web Service, Remote Access Tools, Financial Theft, Spearphishing Voice

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.

© The Risk Letters 2026 · Privacy policy · Terms of sale · Refund policy