MITRE ATT&CKgroup
G0008 Carbanak
- Domain
- enterprise
- Aliases
- Anunak
- Version
- 2.0
- Created
- 2017-05-31
Description
Related
Uses · MITRE ATT&CK (13)
- T1686 Disable or Modify System Firewall technique
- T1588.002 Tool sub-technique
- T1102.002 Bidirectional Communication sub-technique
- T1036.004 Masquerade Task or Service sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1218.011 Rundll32 sub-technique
- T1543.003 Windows Service sub-technique
- T1219 Remote Access Tools technique
- S0002 Mimikatz software (tool)
- S0029 PsExec software (tool)
- S0030 Carbanak software (malware)
- S0108 netsh software (tool)
- T1078 Valid Accounts technique
References
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08064518/Carbanak_APT_eng.pdf Kaspersky Carbanak
- https://www.fireeye.com/blog/threat-research/2017/04/fin7-phishing-lnk.html FireEye FIN7 April 2017
- https://www.europol.europa.eu/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain Europol Cobalt Mar 2018
- https://www.secureworks.com/research/threat-profiles/gold-niagara Secureworks GOLD NIAGARA Threat Profile
- https://www.secureworks.com/research/threat-profiles/gold-kingswood?filter=item-financial-gain Secureworks GOLD KINGSWOOD Threat Profile
- https://www.fox-it.com/en/news/blog/anunak-aka-carbanak-update/ Fox-It Anunak Feb 2015