The campaign was named Carbanak after investigators analyzed the malware used in the operation.
Explicit Confidence 99% · Jack Rhysider EP 35 Details
“At this point they decided to give this malware a name and they called it Carbanak.”
Malware
malware:carbanak
Malware containing a backdoor that attackers used to compromise bank computers and control ATM and financial systems.
Malware containing a backdoor that attackers used to compromise bank computers and control ATM and financial systems.
“they decided to give this malware a name and they called it Carbanak.”
“That one actually contains the back door so the attackers could connect to that computer.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | VARIANT_OF | Carber | Explicit | 35 |
| outgoing | ASSOCIATED_WITH | Anunak | Explicit | 35 |
| outgoing | DISCOVERED_BY | Jornt v.d. Wiel | Derived | 35 |
| incoming | INVOLVES | Carbanak | Explicit | 35 |
The campaign was named Carbanak after investigators analyzed the malware used in the operation.
Explicit Confidence 99% · Jack Rhysider EP 35 Details
“At this point they decided to give this malware a name and they called it Carbanak.”
Jornt says Carbanak was based on malware called Carber.
Explicit Confidence 99% · Jornt v.d. Wiel EP 35 Details
“it was based on malware called Carber”
Carbanak ASSOCIATED_WITH Anunak
The name Carbanak incorporated the name of an Anunak configuration file.
Explicit Confidence 95% · Jornt v.d. Wiel EP 35 Details
“there was a configuration file called Anunak”
Carbanak DISCOVERED_BY Jornt v.d. Wiel
Jornt and his team analyzed the malware and named it Carbanak; Jornt is the identified investigator in the episode.
Derived Confidence 86% · Jornt v.d. Wiel EP 35 Details
“Jornt and his team have responded to a lot of banks with the same problem. They have a copy of the malware”