Cobalt Group
GOLD KINGSWOODCobalt GangCobalt Spider
UnattributedNo public state or group attribution on record
Cobalt Group is a financially motivated threat group that has primarily targeted financial institutions since at least 2016. The group has conducted intrusions to steal money via targeting ATM systems, card processing, payment systems and SWIFT systems. Cobalt Group has mainly targeted banks in Eastern Europe, Central Asia, and Southeast Asia. One of the alleged leaders was arrested in Spain in early 2018, but the group still appears to be active.
MITRE ATT&CK Techniques
Associated Malware
Cobalt StrikeMimikatzMore_eggsPsExecSDeleteSpicyOmelette
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.