Cobalt: their evolution and joint operationsLearn about Cobalt’s development and modification of tools and tactics which were used to steal approximately 1 billion dollars from over 100 banks in 40 different countries.Request

Key facts

Thefts using SWIFT transactions in Hong Kong and Ukraine were committed in cooperation with Anunak (Carbanak)

Cybercriminals were spending approximately three weeks of study inside the network before conducting attacks

Cobalt tested new instruments, often changed locations and spied on victim’s internal systems to prepare for attacks

Starting from the attacks on ATMs in 2016, Cobalt learned to target SWIFT, card processing and payment gateways as well

Cobalt is still active: its members continue attacks on financial organizations and other companies worldwide. We have technical proof of collaboration between Cobalt and Anunak. In order to enable business and market regulators to take preventative measures against these criminals, we provide our customers indicators to protect them from phishing, identify the infrastructure and methods still used by these criminals.

Dmitry Volkov

Chief Technical Officer, Сo‑founder Group‑IB

Group-IB research on targeted attack groups

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Thank you for your interest in our research.
Please fill in the form below and we will send you the Group-IB report. Please make sure to correctly fill in all fields, we will only provide materials on provision of a valid corporate email address.

 

* Your data is protected by Privacy Policy
Thank you for the inquiry!
We will contact you soon.

Report an incident

24/7 Incident Response Assistance +7 495 984-33-64

* Your data is protected by Privacy Policy
Thank you!
We will contact you soon.