Carbanak/Fin7 Syndicate

ID: 743bb1eb-d2b2-497b-84be-2f4dc67c59cc

STIX ID: report--743bb1eb-d2b2-497b-84be-2f4dc67c59cc

Threat Score

78/100

Uploaded: 2026-08-14

Published Date: 2017-11-16

Last Modified Date: 2017-11-16

Created by: dogesec

TLP:CLEAR

ADMIRALTY:B2

PAP:CLEAR

...

## Executive Summary This RSA research paper provides a comprehensive technical analysis of the Carbanak/FIN7 syndicate, describing their malware families (Anunak/Sekur, Carberp, Go trojan, Linux/Windows proxies), C2 protocols (HTTP and custom encrypted TCP), IoCs (domains, IPs, YARA rules), historical infrastructure timelines, crimeware overlaps, and recommended detection/mitigation steps for defenders.