Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 15:01:54 UTC
Home > List all groups > List all tools > List all groups using tool ProxyBot
 Tool: ProxyBot
Names ProxyBot
Category Malware
Type Tunneling
Description
(Group-IB) To enter standalone segments of a corporate network, Silence downloads the
ProxyBot module. The purpose of this software is to redirect, through an infected computer,
traffic from the external C&C server to the local nodes of the compromised network, which are
not accessible from outside. We discovered two versions of the program: one in Delphi and
one in C#.
Information <https://www.group-ib.com/resources/threat-research/silence_moving-into-the-darkside.pdf>
Last change to this tool card: 20 April 2020
Download this tool card in JSON format
All groups using tool ProxyBot
Changed Name Country Observed
APT groups
  Silence, Contract Crew [Unknown] 2016-Aug 2022  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e1ae887e-1bc8-41c7-93b1-42632679f84d
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=e1ae887e-1bc8-41c7-93b1-42632679f84d
Page 1 of 1