VERY IMPORTANT

The Carbanak group is infamous for infiltrating various financial institutions, and stealing millions of dollars by learning and abusing the internals of victim payment processing networks, ATM networks and transaction systems. Recently, we detected Carbanak campaigns attempting to: • Target high level executives in financial companies or in financial/decision-making roles in the Middle East, U.S. and Europe • Spear-phishing emails delivering URLs, macro documents, exploit documents • Use of Spy.Sekur (Carbanak malware) and commodity remote access Trojans (RATs) such as jRAT, Netwire, Cybergate and others used in support of operations.