Threat actor · G0048

RTM

UnattributedNo public state or group attribution on record

RTM is a cybercriminal group that has been active since at least 2015 and is primarily interested in users of remote banking systems in Russia and neighboring countries. The group uses a Trojan by the same name (RTM).

MITRE ATT&CK Techniques

T1102.001 T1189 T1204.002 T1219.002 T1547.001 T1566.001 T1574.001

Associated Malware

RTM

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.