Cobalt, also known by aliases such as Cobalt Group, Cobalt Gang, Cobalt Spider, GOLD KINGSWOOD, Mule Libra, and G0080, is a financially motivated cybercriminal organization that emerged around June 2016. Initially, the group focused on ATM jackpotting operations, systematically evolving its targeting to include broader financial systems such as card processing, payment systems, and SWIFT networks. The group is widely believed to operate out of Eastern Europe or Russia, with its primary motivation being the direct theft of funds rather than data extortion. What sets Cobalt apart is its consistent ability to adapt tactics and tools, maintaining activity even after the arrest of a key leader in 2018. The group has been linked to thefts estimated at €1 billion globally, demonstrating a persistent and significant threat to financial institutions worldwide. The group is often associated with or linked to the malware Carbanak and the FIN7 threat group.

Aliases del actor

COBALT SPIDERCobalt GangCobalt GroupG0080GOLD KINGSWOODMule LibraSharp PandaVictoryDLLSoul frameworkCobalt Strike Beaconincluido el continente africanolas islas del Caribecobalt dickensmabna institutesilent librarianta407apt10earth kashagalliumnoopldrstone pandaMagecart Group 4Point of SaleCriminalorganizaciones comercialesG0008 o Odinaff sugieren una conexión con actores regionalesKittenCOBALTSerpensSandstormrefleja la identidadDark Halo

Actores similares

cobalt-spideractor · 1Cobalt Groupactor · 1cobalt-dickensactor · 1COBALT DICKENSapt · 0Operation Cobalt Whisperapt · 0ExCobaltapt · 0COBALT KATANAapt · 0COBALT JUNOapt · 0apt-sharppandaactor · 1apt-twistedpandaactor · 1