Carbanaks Back And Using Google Services For Command-and-Control

Cybercrime gang employs common cloud services to hide in plain sight.

The infamous Carbanak cybercrime gang responsible for hacking and stealing money from financial insitutions in 2015 recently resurfaced with a new modus operandi: using Google services for command-and-control of its malware.
Researchers from Forcepoint Security Labs today detailed new activity they spotted by the Carbanak gang that employs Googles Apps Script, Sheets, and Forms cloud-based services to send and receive commands for its malware. Forcepoint recently spotted Carbanak using a trojanized RTF document with an encoded Visual Basic script.
For each infected user a unique Google Sheets spreadsheet is dynamically created in order to manage each victim. The use of a legitimate third party service like this one gives the attacker the ability to hide in plain sight, Forcepoint wrote in a blog post today.
Carbanak, which was first discovered by researchers at Kaspersky Lab, is an international cybercrime ring based out of Eastern Europe that
pilfered some $1 billion in two years from 100 different banks in nearly 30 countries
using spear phishing emails targeting bank employees. Its targets were mainly Russian financial institutions, followed by banks in Denmark and the US.
Forcepoint says it has notified Google about Carbanaks fraud via Google services.
Click here
for more information.

Last News
▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security	▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security	▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Carbanaks Back And Using Google Services For Command-and-Control