Trusted Design

Carbanak

アクターID: G0008

· MITRE Pageへのリンク

脅威アクターの詳細

Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.(Citation: Kaspersky Carbanak)(Citation: FireEye FIN7 April 2017)(Citation: Europol Cobalt Mar 2018)(Citation: Secureworks GOLD NIAGARA Threat Profile)(Citation: Secureworks GOLD KINGSWOOD Threat Profile)

脅威アクターの別名・別称

Carbanak
Anunak

利用した攻撃手法

• T1583 - Acquire Infrastructure
• T1218.013 - Mavinject
• T1176.001 - Browser Extensions
• T1586.002 - Email Accounts
• T1009 - Binary Padding
• T1588.001 - Malware
• T1199 - Trusted Relationship
• T1157 - Dylib Hijacking
• T1547.002 - Authentication Package

関連するCVE (攻撃手法に関連)

• CVE-2014-4114 (T1586.002)
• CVE-2012-1856 (T1157)
• CVE-2014-6332 (T1583)
• CVE-2012-0158 (T1009)
• CVE-2015-1701 (T1157)
• CVE-2012-4969 (T1583)
• CVE-2014-1776 (T1157)
• CVE-2013-3660 (T1157)
• CVE-2010-0806 (T1583)
• CVE-2015-2360 (T1157)
• CVE-2010-4398 (T1157)
• CVE-2015-2546 (T1157)
• CVE-2014-4113 (T1157)
• CVE-2017-0263 (T1157)
• CVE-2015-0057 (T1157)
• CVE-2014-4148 (T1176.001)
• CVE-2015-1770 (T1199)
• CVE-2017-0199 (T1586.002)
• CVE-2017-0143 (T1547.002)
• CVE-2015-5119 (T1009)
• CVE-2015-5122 (T1009)
• CVE-2015-1427 (T1009)
• CVE-2017-12149 (T1009)
• CVE-2015-4495 (T1157)
• CVE-2014-6271 (T1009)
• CVE-2013-2094 (T1157)
• CVE-2015-3628 (T1157)
• CVE-2015-6034 (T1157)
• CVE-2015-2853 (T1009)
• CVE-2015-7755 (T1009)
• CVE-2015-7261 (T1009)
• CVE-2015-8286 (T1009)
• CVE-2016-6532 (T1009)
• CVE-2016-9496 (T1157)
• CVE-2016-9495 (T1009)
• CVE-2015-0932 (T1009)
• CVE-2012-0056 (T1157)
• CVE-2010-3081 (T1157)
• CVE-2012-3213 (T1009)
• CVE-2014-0322 (T1009)
• CVE-2011-3544 (T1009)
• CVE-2015-3636 (T1157)
• CVE-2017-17215 (T1009)
• CVE-2012-4681 (T1157)
• CVE-2015-1761 (T1157)
• CVE-2010-1297 (T1009)
• CVE-2013-7331 (T1157)
• CVE-2013-2678 (T1009)
• CVE-2008-1436 (T1157)
• CVE-2014-3393 (T1009)
• CVE-2012-6422 (T1157)
• CVE-2014-3897 (T1009)
• CVE-2011-0611 (T1009)
• CVE-2013-5990 (T1009)
• CVE-2015-2419 (T1009)
• CVE-2016-0189 (T1009)
• CVE-2025-31125 (T1157)
• CVE-2025-66478 (T1009)
• CVE-2026-20127 (T1157)
• CVE-2015-5477 (T1588.001)
• CVE-2015-0016 (T1157)
• CVE-2017-16929 (T1588.001)
• CVE-2014-6352 (T1199)
• CVE-2015-5897 (T1157)
• CVE-2015-3456 (T1157)
• CVE-2015-7808 (T1157)
• CVE-2016-1990 (T1157)
• CVE-2016-1019 (T1157)
• CVE-2015-7262 (T1157)
• CVE-2012-1258 (T1157)
• CVE-2014-3153 (T1157)
• CVE-2014-4322 (T1157)
• CVE-2010-0188 (T1157)
• CVE-2014-6324 (T1157)
• CVE-2010-0738 (T1157)
• CVE-2010-0232 (T1157)
• CVE-2013-2595 (T1157)
• CVE-2015-2387 (T1157)
• CVE-2011-1255 (T1157)
• CVE-2017-0001 (T1547.002)
• CVE-2023-1389 (T1157)
• CVE-2025-13927 (T1157)
• CVE-2025-13928 (T1157)
• CVE-2025-24893 (T1157)
• CVE-2025-55183 (T1157)
• CVE-2025-68645 (T1157)
• CVE-2026-1102 (T1157)
• CVE-2015-0071 (T1547.002)

Actor – Pulse グラフ

---

← 脅威アクター一覧に戻る