Home / Threat actors / Carbanak
Carbanak G0008
Also known as: Anunak
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
13
Techniques
4
Malware and tools
Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Initial Access
T1078 Valid Accounts Persistence
T1078 Valid AccountsT1543.003 Windows Service Privilege Escalation
T1078 Valid AccountsT1543.003 Windows Service Stealth
T1036.004 Masquerade Task or ServiceT1036.005 Match Legitimate Resource Name or LocationT1078 Valid AccountsT1218.011 Rundll32 Defense Impairment
T1686 Disable or Modify System Firewall Command and Control
T1102.002 Bidirectional CommunicationT1219 Remote Access Tools © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.