G0008 · 10 ATT&CK techniques · 0 correlated reports

Carbanak

Aliases: Anunak

Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.

Open interactive actor investigation

ATT&CK techniques

T1562.004
Disable or Modify System FirewallT1036.004
Masquerade Task or ServiceT1218.011
Rundll32T1078
Valid AccountsT1102.002
Bidirectional CommunicationT1543.003
Windows ServiceT1219
Remote Access SoftwareT1036.005
Match Legitimate Name or LocationT1588.002
ToolT1008
Fallback Channels

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research