Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 12:34:37 UTC Home > List all groups > List all tools > List all groups using tool EmpireDNSAgent Tool: EmpireDNSAgent Names EmpireDNSAgent EDA Category Malware Type Backdoor, Tunneling Description (Group-IB) The attacks involved a new tool, which is downloaded by the main Trojan Silence.Main and based on the EmpireProject and dnscat2 open source projects for penetration testing. Group-IB dubbed the tool EmpireDNSAgent or EDA. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool EmpireDNSAgent Changed Name Country Observed APT groups   Silence, Contract Crew [Unknown] 2016-Aug 2022   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=53de6583-3773-4838-bd45-451c97831322 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=53de6583-3773-4838-bd45-451c97831322 Page 1 of 1