Skip to content

Malware

Carbanak

aka Anunak · Sekur RAT

MyCERT states that Carbanak is a remote backdoor designed for espionage, data exfiltration, and to remote control.

Carbanak, also known as Anunak, Sekur RAT, is a Windows malware family operated by FIN7.

Background

According to MyCERT, Carbanak is a remote backdoor built for espionage, data exfiltration, and remote control.

Operators distribute the malware through spear phishing emails that entice the recipient to open and execute a malicious attachment, infecting the machine. The campaign's chief goal is to remotely command the compromised host and seize control over internal money-processing endpoints such as Automated Teller Machines (ATM) and financial accounts. The malware's capabilities are as follows:


Source: Malpedia (Fraunhofer FKIE).