Loading malware…
Nmap is a network scanning and security reconnaissance tool authored by Gordon Lyon (Fyodor). In the provided content, it is referenced as being used by the Silence threat actor to scan corporate networks, map network topology, and identify vulnerable hosts during post-compromise discovery and lateral movement preparation. The content does not describe Nmap as malware in itself; rather, it is a legitimate security scanner that can be used by threat actors for network enumeration. Associated context in the content links its use to Silence operations targeting corporate environments, including bank-related intrusions. No specific indicators of compromise for Nmap are provided in the content beyond its use for network scanning and host discovery.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
Silence has used Nmap to scan the corporate network, build a network topology, and identify vulnerable hosts.
9 distinct techniques documented for this family, organized by ATT&CK tactic.
Le processus couvre ... Découverte d’hôtes, ports et services.
«сканирование портов - это Active Scanning (T1595, Reconnaissance) на внешнем периметре»
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Network discovery/port scanning tool used for network inspection and enumeration.
Network discovery/scanning tool used to enumerate networks and identify hosts/services; referenced here for internal reconnaissance.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.