Carbanak

Carbanak is an known alias of the APT group FIN7

Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.

Carbanak is an advanced persistent threat (APT) that has been active since at least 2013, targeting financial institutions and other organizations in over 40 countries worldwide. The group uses a variety of tactics to gain access to their targets\' networks, including spear-phishing emails, malware downloads from compromised websites, and exploiting vulnerabilities in software or operating systems. Once inside the network, Carbanak can steal sensitive information such as account numbers, passwords, and other financial data. The group has been linked to several high-profile attacks on banks and payment processors around the world.

Techniques, tactics and practices:

Carbanak uses a variety of techniques to gain access to their targets\' networks, including spear-phishing emails that contain malicious attachments or links. They also exploit vulnerabilities in software and operating systems by using zero-day attacks, which are not yet known to the vendor. Once inside the network, Carbanak can steal sensitive information such as account numbers, passwords, and other financial data through various methods, including credential harvesting, malware downloads from compromised websites, and exfiltration of data via encrypted channels or physical media like USB drives. They also use tools to hide their activities within the network, making it difficult for security teams to detect them.