Silver Terrier: 2018 Nigerian Business Email Compromise Update
Summary: Unit 42's SilverTerrier tracking counted more than 400 Nigerian actors tied to over 51,000 malware samples and 1.1 million attacks across four years, with average monthly attacks rising from 18,294 in 2017 to 28,227 in 2018, a 54% annual increase. In 2018 the actors averaged 1,000 information stealer samples per month, a 26% decline, while remote administration tool samples averaged 533 per month, up 36%, and 14,694 samples tested against VirusTotal drew an average 53% detection rate at discovery that reached only 58% by early 2019.
Bottom line: Roughly half of the malware these actors produced went undetected by antivirus vendors when it first appeared, and the group's shift toward remote administration tools gives attackers interactive access to victim systems rather than simple data theft.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026