Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Anunak
9
techniques
4
software
3,901
corpus matches
profile
Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.
techniques
9 attributed · most-instrumented first
software
4 malware & tools attributed
Mimikatz
S0002
PsExec
S0029
Carbanak
S0030
netsh
S0108
read this carefully
3,901 corpus matches is not attribution
That count is indicators which exhibit techniques Carbanak is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
persistence · privilege-escalation
showing 30 of 3,901
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.