← All actors Recent activity

SILENTLYNX

SILENTLYNX · hydra saiga · shadowsilk

Indicators
284
Source reports
22
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-06-22
20252026

Overview 284 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain251SILENTLYNX-domain.txt
ipv423SILENTLYNX.json
url9SILENTLYNX.json
url_path1SILENTLYNX.json

Principal sources 22 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 284 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 2 ipv4this year

    x.com/phatomcandle/status/2068755847854072238 · x.com/skocherhan/status/2068803834403602740

    152.53.20.140:443
    154.31.217.203:443

  2. 4 domain, 1 ipv4this year

    x.com/SinghSoodeep/status/2033590183929721308 · x.com/ElementalX2/status/2033593705735852115 · virustotal.com/gui/file/a146e914560229a3389589acaee42c…

    domainfilecenter.online
    domainfilereader.online
    domainmail-sanly.filecenter.online
    domainmail-sanly.filereader.online
    ipv4185.62.57.219:10443

  3. 11 ipv4, 1 urlthis year

    vmray.com/hydra-saiga-covert-espionage-and-infilt…

    ipv4141.98.82.198:443
    ipv4172.86.75.237:443
    ipv465.38.120.38:443
    ipv465.38.121.107:8000
    ipv472.5.43.100:443
    ipv472.5.43.178:443
    ipv481.19.136.241:443
    ipv482.115.223.210:9942
    ipv485.209.128.171:10443
    ipv488.214.26.37:443
    ipv496.9.125.168:443
    urlhttp://185.106.92.127

  4. or earlier 20 domain, 8 ipv4, 8 urlthis year

    group-ib.com/blog/shadowsilk

    domainadm-govuz.com
    domainadmin.inboxsession.info
    domainallcloudindex.com
    domainauth.allcloudindex.com
    domaindocument.mailboxarea.cloud
    domaindocument.webmailsession.com
    domaindocworldme.com
    domainemails-cloud.com
    domainex.wincorpupdates.com
    domaininbox.docworldme.com
    domaininboxsession.info
    domainmailboxarea.cloud
    domainmessage.mailboxarea.cloud
    domainmosreg.docworldme.com
    domainopenpdfllc.com
    domainqwadx.com
    domainss.qwadx.com
    domainsss.qwadx.com
    domainwebmailsession.com
    domainwincorpupdates.com
    ipv4141.98.82.198:9942
    ipv4193.124.203.226:9942
    ipv481.19.136.241:9942
    ipv485.209.128.171:3306
    ipv485.209.128.171:8000
    ipv485.209.128.171:8080
    ipv485.209.128.171:9000
    ipv488.214.26.37:9942
    urlhttp://168.100.8.21
    urlhttp://64.7.198.46
    urlhttp://64.7.198.66
    urlhttp://65.38.120.38
    urlhttp://65.38.121.107
    urlhttp://72.5.43.100
    urlhttp://85.209.128.171
    urlhttp://91.212.89.197

  5. or earlier 9 domainthis year

    x.com/ElementalX2/status/1985340834217173061 · seqrite.com/blog/operation-peek-a-baku-silent-lynx-…

    catalog-update-update-microsoft.serveftp.com
    gmvtest9.ddns.net
    kingikolok.ignorelist.com
    maill.ddns.net
    maquinadelmal.duckdns.org
    q1q.ddns.net
    updates-check-microsoft.ddns.net
    useraccount-assist05u.dynamic-dns.net
    windows-update-catalog.serveftp.com

  6. 2 domain1 yr ago

    app.validin.com/detail?find=Accessible%20Neats&type=raw…

    alfhjdumnsulhuehs.com
    spsalemarketing.com

  7. 211 domain1 yr ago

    app.validin.com/detail?find=Accessible%20Neats&type=raw…

    accttechllc.com
    akcloud.top
    akersolutoins.com
    alandyh.com
    albertinamachinery.com
    allocco-ar.com
    alpine-hosokawa.net
    altendorf-de.com
    annons.info
    arableaguenews.com
    arpimportnl.com
    asdnwakalet.net
    asmtld.com
    atomicenergylab.com
    authmailinbox.com
    ax47tui83.com
    aydemirtek.com
    babblnipresses.com
    bencoconstructionsllc.com
    bestdomblog.com
    bestmartsolutions.com
    bestunif.com
    bluemoono.com
    brainytask.tech
    brandxoffice.com
    breuing-irco.com
    brindley-medical.com
    cae-gruope.com
    cairo-day-trips.com
    caprnatic.com
    catchthestorms.net
    check-connection.org
    checkingsite.org
    citylinefood.com
    cm-elevatori.com
    cmcrushermachine.com
    colombaogrobg.com
    consultafacildoc.com
    consultasfacildoc.com
    converting-system.com
    csiwoffshore.com
    datosdecuit.com
    dl-keepass.info
    dmgrnori.com
    dmsplasts.com
    downloadmailbox.com
    e-egov.com
    eaglesxv.com
    eco-prozestechnik.com
    eew-groups.com
    elcomen.com
    elike-rne.com
    elinkexpressltd.com
    elldrissi.com
    elpisitsinc.com
    emiratom.com
    emsilgroups.com
    enigmaaxis.com
    envolvesearch.com
    estaterlea.com
    etori.info
    etunabilar.com
    field-tec.org
    filfilter-tr.com
    filorep.com
    fob-au.com
    garmorgan.com
    gdrr.info
    geanew.com
    geniwatit.com
    genmac-it.com
    globa-space.com
    globexgruop.com
    goodbabiynt.com
    greeentom.com
    gsbplataforma.com
    guidolingiroto.com
    gvfimpainti.com
    gynovetylesc.com
    hamzagill.com
    harrellc.com
    henigworldwide.com
    hgbeerequipment-uk.com
    hi053.info
    hidrogarnes.com
    hpfrugt.com
    hsb-it.com
    husmanin-web.com
    hydrocleariservices.com
    inboxoid.com
    interger.org
    investmentsfor.com
    j-tiec.com
    jeetu.club
    jeetu.global
    jeetu.me
    jonesproduces.com
    jskhcdiueslnin.com
    juargen-escher.com
    k670.info
    khu3x.info
    kovis-groups.com
    kss-sap.com
    kycountynews.com
    l161.info
    ledsf.com
    lnciner8.com
    lnteracservice.in
    lnteracservices.com
    loftinequlp.com
    lophjgihh.com
    luada-technology.com
    lutz-purnpen.com
    lyndexrceycling.com
    m339.info
    magnitudeconsults.com
    magnumiserviceslp.com
    mailkeyboard.com
    mailruinbox.com
    mansoorhabibdoost.com
    masonindustries-sg.com
    matast.com
    michlot.org
    miecal.com
    mininnovationuz.com
    miyako-securities.com
    mlutibeias.com
    mozoil-llc.com
    mprecisionsgrinding.com
    mqmuk.com
    mrwallpaper.net
    multinedia-connect.com
    mvfglobai.com
    mxdnxlove.com
    mypreciousdomainer.net
    myunistars.com
    navtechsradar.com
    ncspares-za.com
    newscode.net
    ngmex.org
    oakcreekapples.com
    officelabelsonline.com
    officewithyou.com
    onlinefinancenews.com
    onurtektsil.com
    ormac-it.com
    ozfarmnews.com
    partincpas.com
    piasskowanie.net
    pp731.info
    productddon.com
    psbvip.com
    q-10c.com
    qazmarinefuel.com
    qswl.org
    ravemia.com
    realialebrewing.com
    reginachian.net
    registermydomainagain.top
    releasedatestory.com
    reynco.co
    reyncos.com
    rinbid.com
    rotomabe.com
    sasafetty.com
    sdzgw.org
    secfatsbily.com
    segrez.com
    shuchonafoods.com
    smartwebgroup.net
    sobarialty.com
    solfarmer.net
    springstonenergyltd.com
    srsconvayors.com
    starraqid.com
    steambolers.com
    straemer-electric.com
    suncrb.com
    swatsconstruction.com
    teachaways.com
    terra-worlds.com
    tfherald.com
    tigers-coatings.com
    toampn.com
    toirbo.com
    toppciqm.com
    toptutorialsstore.com
    tradesworksinc.com
    travellingwords.com
    unionlnvest.com
    uphearth.com
    ural-info.net
    usefullhost.info
    valkiriya.team
    vapic.org
    verification.sdzgw.org
    vibropowers.com
    viewpiontsystem.com
    volgagas.net
    waikatosinc.com
    websubline.com
    woodrecyclability.com
    work-dl.org
    wpowerproduct.com
    x683.info
    xnxx-v.com
    xpanxions.com
    yanimar.com
    yushinautomations.com
    zbtflorida.org
    zzbanjia0371.net

  8. 5 domain1 yr ago

    x.com/StrikeReadyLabs/status/1877839055716581… · x.com/virusbtn/status/1882771331726647421 · seqrite.com/blog/silent-lynx-apt-targeting-central-… · app.validin.com/detail?find=64.7.198.66&type=ip4&ref_id… · virustotal.com/gui/file/efb700681713cd50a2addd1fea6b7e… · virustotal.com/gui/file/e6f76a73180b4f2947764f4de57b52… · virustotal.com/gui/file/3560660162f2268d52b69382c78192… · virustotal.com/gui/file/297d1afa309cdf0c84f04994ffd59e… · virustotal.com/gui/file/c045344b23fc245f35a0ff4a6d6fa7… · virustotal.com/gui/file/1b76931775aa4de29df27a9de764b2… · virustotal.com/gui/file/66294c9925ad454d5640f4fe753da9… · virustotal.com/gui/file/99c6017c8658faf678f1b171c8eb5d…

    accessibleneats.com
    document.hometowncity.cloud
    hometowncity.cloud
    mailboxdownload.com
    pweobmxdlboi.com

  9. 1 url_path1 yr ago

    x.com/phatomcandle/status/2068755847854072238 · x.com/skocherhan/status/2068803834403602740

    /iufhtyhgyfugj.php

  10. 1 ipv41 yr ago

    x.com/StrikeReadyLabs/status/1877839055716581… · x.com/virusbtn/status/1882771331726647421 · seqrite.com/blog/silent-lynx-apt-targeting-central-… · app.validin.com/detail?find=64.7.198.66&type=ip4&ref_id… · virustotal.com/gui/file/efb700681713cd50a2addd1fea6b7e… · virustotal.com/gui/file/e6f76a73180b4f2947764f4de57b52… · virustotal.com/gui/file/3560660162f2268d52b69382c78192… · virustotal.com/gui/file/297d1afa309cdf0c84f04994ffd59e… · virustotal.com/gui/file/c045344b23fc245f35a0ff4a6d6fa7… · virustotal.com/gui/file/1b76931775aa4de29df27a9de764b2… · virustotal.com/gui/file/66294c9925ad454d5640f4fe753da9… · virustotal.com/gui/file/99c6017c8658faf678f1b171c8eb5d…

    185.122.171.22:8082

Further reading 22