Malware belonging to Russian-speaking threat actors was used in attacks in late January against at least two European companies in the pharmaceutical and manufacturing industries. The first malware samples used in these attacks emerged on VirusTotal scanning platform on February 2, identified as Silence ProxyBot and updated versions of Silence.MainModule. Both samples are associated with Silence, a group that started in 2016 targeting banks in the former Soviet Union territory, later expanding their attack region globally. While TA505 s history of attacks includes targets in the medical sector, these incidents would mark for Silence a departure from its regular targets.
Source: https://www.bleepingcomputer.com/news/security/russian-speaking-hackers-attack-pharma-manufacturing-companies-in-europe/