HOMETHREATSSILENTLOOP
APT / THREAT GROUP

SILENTLOOP

2
aliases
Last seen:Jun 11, 2026

Intelligence Profile

According to CERT-UA, SILENTLOOP is a PowerShell-based component that coordinates command execution, automatic configuration updates, and discovery of the C2 address, with the main C2 address obtained from a Telegram channel. It supports fallback mechanisms for locating the C2 to maintain control if the primary channel changes. This tool operates as part of a broader attack toolset, enabling persistent management of compromised hosts and facilitating reconnaissance and lateral movement through the network.

Threat Analysis

SILENTLOOP is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

SILENTLOOPps1.silentloop

External Intelligence

Malpedia: ps1.silentloop

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
SILENTLOOP — APT / Threat Group | Threat Intelligence | CTIWATCH.COM