Carbanak
- ID
- G0008
- Associated names
- Anunak
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.[1][2][3][4][5]
Techniques used (9)
- T1036.004 Masquerade Task or Service
- T1036.005 Match Legitimate Resource Name or Location
- T1078 Valid Accounts
- T1102.002 Bidirectional Communication
- T1218.011 Rundll32
- T1219 Remote Access Tools
- T1543.003 Windows Service
- T1588.002 Tool
- T1686 Disable or Modify System Firewall