FIN7__2016__proofpoint-threat-insight-carbanak-group-en.pdf
ID: cfdd6e3c-ec05-4c0f-bf22-3e11adbbdf35
STIX ID: report--cfdd6e3c-ec05-4c0f-bf22-3e11adbbdf35
Threat Score
85/100
Uploaded: 2026-08-14
Published Date: 2016-03-15
Last Modified Date: 2016-03-15
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Proofpoint's March 2016 report documents Carbanak campaigns that targeted financial executives across the Middle East, United States and Europe using spear-phishing (exploit URLs and macro-enabled documents) to deliver Spy.Sekur and multiple remote-access trojans; the report includes technical analysis of droppers and NSIS installers, signed payloads, C2 infrastructure, extensive IoCs (SHA256s, domains, IPs, URLs), and regional targeting statistics.