FIN7__2015__Russian_financial_cybercrime_how_it_works_-_Securelist.pdf

This Kaspersky Lab report outlines how Russian-language financial cybercrime operates: its market of products and services, the labor roles (programmers, testers, distributors, money flow managers, mule projects), organizational formats (affiliate programs, small groups, large organized groups like Carberp and Carbanak), common attack stages (exploration, infection, lateral movement, theft), and the scale and impact of these crimes, including aggregated loss estimates and law enforcement activity between 2012–2015.