APT / THREAT GROUP

SILKFIN AGENCY

aliases

Last seen:Mar 17, 2026

Intelligence Profile

SILKFIN AGENCY has claimed responsibility for multiple significant data breaches, including the compromise of DimeCuba.com, which exposed over 1 million SMS records and more than 100,000 email records. They also targeted the Sri Lankan Department of Agrarian Development, allegedly compromising the personal and agricultural data of over 1.45 million farmers. Additionally, they claimed a breach of the Siam Cement Group's database. The breaches involved sensitive data such as NIC numbers and transaction details.

Threat Analysis

SILKFIN AGENCY is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://dailydarkweb.net/threat-actor-claims-breach-of-siam-cement-group-database/

→https://dailydarkweb.net/threat-actor-claimed-to-breach-database-of-dimecuba/

→https://dailydarkweb.net/a-threat-actor-alleged-breach-of-sri-lankan-farmers-community-database/

Quick Facts

TypeAPT / Threat Group

Aliases1

SourceMalpedia

Also Known As

SILKFIN AGENCY

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search SILKFIN AGENCY