threatintel
actor tracker
IOC pivot
ioc · name

Carbanak

?? · UnknownFIN7confidence · high

Full-featured remote backdoor family (a.k.a. Anunak) catalogued by MITRE ATT&CK as S0030 and historically attributed to the Carbanak group (G0008) and FIN7 (G0046). Used by FIN7 as part of post-exploitation toolchains delivered via POWERTRASH / EugenLoader.

family
Carbanak
first seen
Nov 30, 2014
publisher
MITRE ATT&CK
source citation