Skip to content

Carbanak

Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.

ATT&CK ID: G0008
Techniques: 8
Tools: 4

Also tracked as Anunak

Techniques

Resource Development

Obtain Capabilities

Initial Access

Persistence

Valid Accounts Create or Modify System Process

Privilege Escalation

Valid Accounts Create or Modify System Process

Stealth

Masquerading Valid Accounts System Binary Proxy Execution

Defense Impairment

Disable or Modify System Firewall

Command and Control

Web Service Remote Access Tools

Software

Carbanak · Mimikatz · PsExec · netsh

MITRE ATT&CK All threat actors