G0008

G0008Carbanak

Description

[Carbanak](https://attack.mitre.org/groups/G0008) is a cybercriminal group that has used [Carbanak](https://attack.mitre.org/software/S0030) malware to target financial institutions since at least 2013. [Carbanak](https://attack.mitre.org/groups/G0008) may be linked to groups tracked separately as [Cobalt Group](https://attack.mitre.org/groups/G0080) and [FIN7](https://attack.mitre.org/groups/G0046) that have also used [Carbanak](https://attack.mitre.org/software/S0030) malware.(Citation: Kaspersky Carbanak)(Citation: FireEye FIN7 April 2017)(Citation: Europol Cobalt Mar 2018)(Citation: Secureworks GOLD NIAGARA Threat Profile)(Citation: Secureworks GOLD KINGSWOOD Threat Profile)

References

  1. https://attack.mitre.org/groups/G0008
  2. https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08064518/Carbanak_APT_eng.pdf
  3. https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.html
  4. https://www.europol.europa.eu/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain
  5. https://www.secureworks.com/research/threat-profiles/gold-niagara
  6. https://www.secureworks.com/research/threat-profiles/gold-kingswood?filter=item-financial-gain
  7. https://www.fox-it.com/en/news/blog/anunak-aka-carbanak-update/

Software attributed to this1

TypeTargetConfidenceTier
SoftwareCarbanaks0030100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Group
Cobalt Group
Group
FIN7
Group
FIN8
Software
Carberp
Group
FIN10
Group
RTM
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.