Group-IB and Fox-IT. (2014, December). Anunak: APT against financial institutions. Retrieved April 20, 2016.
Not cited by any technique.
None recorded.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1219 Remote Access Tools |
GroupCarbanak | Carbanak used legitimate programs such as AmmyyAdmin and Team Viewer for remote interactive C2 to target systems. |
| T1686 Disable or Modify System Firewall |
GroupCarbanak | Carbanak may use netsh to add local firewall rule exceptions. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
