Carbanak, currently one of the most effective advanced persistent threats (APTs) active, poses a serious threat to critical infrastructure organizations such as banks, government, and data brokers such as Equifax. The Carbanak APT demonstrates how criminal collectives can adapt, divide, and evolve as their tools, techniques, and procedures advance.
In this analysis, entitled “Carbanak Threatens Critical Infrastructure: Cybercriminal APTs Merit Significant Investigation and Discussion,” the Institute for Critical Infrastructure Technology offers an in-depth analysis of the Carbanak APT, providing insights on topics including:
- How Carbanak demonstrates the capabilities of cybercriminal collectives
- A history and analysis of Carbanak attacks and the malware used
- A discussion of the Cobalt sub-group which emerged from Carbanak
- The risk Carbanak poses to critical infrastructures
This paper was authored by James Scott, Sr. Fellow, ICIT