H3XA — Operational Evidence

TypeGroup

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[SilverTerrier](https://attack.mitre.org/groups/G0083) is a Nigerian threat group that has been seen active since 2014. [SilverTerrier](https://attack.mitre.org/groups/G0083) mainly targets organizations in high technology, higher education, and manufacturing.(Citation: Unit42 SilverTerrier 2018)(Citation: Unit42 SilverTerrier 2016)

9 recorded

Relationships

uses

to Agent Tesla

Malware

uses

to DarkComet

Malware

uses

to File Transfer Protocols

Technique

uses

to Financial Theft

Technique

uses

to Lokibot

Malware

uses

to Mail Protocols

Technique

uses

to NanoCore

Malware

uses

to NETWIRE

Malware

uses

to Web Protocols

Technique

4 external

References

mitre-attack

G0083

open

SilverTerrier

—

Unit42 SilverTerrier 2016

https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/reports/Unit_42/silverterrier-next-evolution-in-nigerian-cybercrime.pdf

open

Unit42 SilverTerrier 2018

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/unit42-silverterrier-rise-of-nigerian-business-email-compromise

open