The cybercriminal group SILENCE

ANSSI examines the Silence criminal group (active since 2016), describing their phishing-led intrusion campaigns that deploy loaders/backdoors (Truebot, Ivoke), proxy utilities (Silence.ProxyBot), and bespoke ATM and card-processing malware (Atmosphere, Slowroll, Cardcam) to perform coordinated ATM cash-outs and manipulate card limits; the report cites multiple confirmed thefts (including a ~$3M heist) and provides TTPs and IoCs to aid detection and response.