Threat Actor Profile
High APT
Description

SilverTerrier is a Nigerian threat group that has been seen active since 2014. SilverTerrier mainly targets organizations in high technology, higher education, and manufacturing.(Citation: Unit42 SilverTerrier 2018)(Citation: Unit42 SilverTerrier 2016)

Confidence Score
90%
Known Aliases
SilverTerrier
Tags
mitre-attack stix-2.1 intrusion-set
First Seen

Unknown

Last Updated

Unknown

Active Status
Active
Created

April 29, 2026

MITRE ATT&CK Techniques (4)
T1071.001 - Web Protocols
Command and Control
T1071.002 - File Transfer Protocols
Command and Control
T1071.003 - Mail Protocols
Command and Control
T1657 - Financial Theft
Impact
Indicators of Compromise

Loading IOCs…

IOC KQL for Sentinel
STIX Data 
{'aliases': ['SilverTerrier'],
 'created': '2019-01-29T21:36:59.793Z',
 'created_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'description': '[SilverTerrier](https://attack.mitre.org/groups/G0083) is a '
                'Nigerian threat group that has been seen active since 2014. '
                '[SilverTerrier](https://attack.mitre.org/groups/G0083) mainly '
                'targets organizations in high technology, higher education, '
                'and manufacturing.(Citation: Unit42 SilverTerrier '
                '2018)(Citation: Unit42 SilverTerrier 2016)',
 'external_references': [{'external_id': 'G0083',
                          'source_name': 'mitre-attack',
                          'url': 'https://attack.mitre.org/groups/G0083'},
                         {'description': '(Citation: Unit42 SilverTerrier '
                                         '2018)(Citation: Unit42 SilverTerrier '
                                         '2016)',
                          'source_name': 'SilverTerrier'},
                         {'description': 'Renals, P., Conant, S. (2016). '
                                         'SILVERTERRIER: The Next Evolution in '
                                         'Nigerian Cybercrime. Retrieved '
                                         'November 13, 2018.',
                          'source_name': 'Unit42 SilverTerrier 2016',
                          'url': 'https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/Unit_42/silverterrier-next-evolution-in-nigerian-cybercrime.pdf'},
                         {'description': 'Unit42. (2016). SILVERTERRIER: THE '
                                         'RISE OF NIGERIAN BUSINESS EMAIL '
                                         'COMPROMISE. Retrieved November 13, '
                                         '2018.',
                          'source_name': 'Unit42 SilverTerrier 2018',
                          'url': 'https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/unit42-silverterrier-rise-of-nigerian-business-email-compromise'}],
 'id': 'intrusion-set--76565741-3452-4069-ab08-80c0ea95bbeb',
 'modified': '2023-09-27T20:22:05.127Z',
 'name': 'SilverTerrier',
 'object_marking_refs': ['marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168'],
 'revoked': False,
 'spec_version': '2.1',
 'type': 'intrusion-set',
 'x_mitre_attack_spec_version': '3.2.0',
 'x_mitre_deprecated': False,
 'x_mitre_domains': ['enterprise-attack'],
 'x_mitre_modified_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'x_mitre_version': '1.2'}
Quick Actions
Related TTPs (4)
Web Protocols
Command and Control
File Transfer Protocols
Command and Control
Mail Protocols
Command and Control
Financial Theft
Impact
Back to Threat Actors
Dashboard Home