MoneyTakerThreat actor
In less than two years, this group has conducted over 20 successful attacks on financial institutions and legal firms in the USA, UK and Russia. The group has primarily been targeting card processing systems, including the AWS CBR (Russian Interbank System) and purportedly SWIFT (US).From MISP Galaxy
Last reported 8 years ago, by Group-IB3 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1684Social Engineering
“…e regular personnel trainings, which should include not only training sessions on issues related to targeted attacks, phishing and social engineering, but also “combat training”: banks should simulate targeted attacks or phishing emails from time to time.”
What the reports say
3 reports, newest first · the exact sentence from each-
Silence: Moving into the Darkside“Initial impressions would indicate that the targeted attack was on par with the works of Cobalt or MoneyTaker.”
-
MoneyTaker: in pursuit of the invisible“MoneyTaker: in pursuit of the invisible”
-
Targeted attacks on banks“…targeted attacks, whereas in 2015 there were three (Anunak, Corkow and Andromeda), and in 2016 four of them (Buhtrap, Lurk, Cobalt and MoneyTaker).”
Thanks — we review every report.