The hunt for the Carbanak group

September 2019 Editor's Choice, Information Security, News & Events

Tomorrow Unlocked, the online magazine for digital culture created by Kaspersky, has released a new, free four-part documentary that tells the story of the notorious Carbanak APT (advanced persistent threat) group and its $1 billion bank heist. This film launches a new real-cybercrime series named ‘hacker:HUNTER’.

The four episodes (with a total running time of 31 minutes) tell the story of how, as part of an international investigation, four members of the group were arrested in Taiwan and Spain. As part of this crime story, it outlines the history of the Carbanak gang, how they stole the money and why it was so difficult to stop them. The film has brought together experts including different security vendors, as well as regulators, and the media.

The Carbanak gang is an infamous cybercrime group responsible for financial theft on an immense scale. It was the first group to apply to common financial crime the kind of highly sophisticated tools, techniques and processes usually associated with nation-state backed threat actors. It learned from these advanced groups how to stay under the radar while monetising a fortune.

Over time, Carbanak turned into an umbrella for a range of cybercriminal activities all sharing the same purpose of illegal financial gain. In 2018, this active international cooperation led to the arrests of suspected members of the gang.

The newly-released movie is the first in a series of documentaries into major cyber incidents across the globe. Audiences can already look forward to the second in the hacker:HUNTER series, which stages the Wannacry epidemic of 2017 on the screen, followed by further exciting documentaries on the most incredible cybercrimes in history.

“When we initially discovered Carbanak, we were impressed with its sophistication. The way they moved through networks and were finally able to extract money from a financial institution was something we hadn’t seen before. At the same time we also knew we had to stop this threat, which copied its tactics, techniques and procedures from nation-state APT campaigns. We hope that with this documentary we can provide insight on the inner workings of this criminal group and that potential criminals will realise that cybercrime doesn’t pay,” notes Jornt van der Wiel, security expert at Kaspersky.

See the hacker:HUNTER documentary series on TomorrowUnlocked.com ( https://www.tomorrowunlocked.com/guardians/hacker_hunter/)





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
The power of PKI and private sector innovation
Access Control & Identity Management News & Events Government and Parastatal (Industry)
At the recent ID4Africa 2025 Summit in Addis Ababa, the spotlight was firmly on building secure, inclusive, and scalable digital identity ecosystems for the African continent.

Read more...
DeepSneak deception
Information Security News & Events
Kaspersky Global Research & Analysis researchers have discovered a new malicious campaign which is distributing a Trojan through a fake DeepSeek-R1 Large Language Model (LLM) app for PCs.

Read more...
SA’s strained, loadshedding-prone grid faces cyberthreats
Power Management Information Security
South Africa’s energy sector, already battered by decades of underinvestment and loadshedding, faces another escalating crisis; a wave of cyberthreats that could turn disruptions into catastrophic failures. Attacks are already happening internationally.

Read more...
Almost 50% of companies choose to pay the ransom
News & Events Information Security
This year’s Sophos State of Ransomware 2025 report found that nearly 50% of companies paid the ransom to get their data back, the second-highest rate of ransom payment for ransom demands in six years.

Read more...
Value and industry insight
Securex South Africa Training & Education News & Events
Securex South Africa 2025, co-located with A-OSH EXPO, Facilities Management Expo, and Firexpo, drew thousands of security professionals from across the continent and beyond, offering a platform for networking, product discovery, and knowledge sharing.

Read more...
Survey highlights cost of cyberdamage to industrial companies
Kaspersky Information Security News & Events
The majority of industrial organisations estimate their financial losses caused by cyberattacks to be over $1 million, while almost one in four report losses exceeding $5 million, and for some, it surpasses $10 million.

Read more...
Digital economy needs an agile approach to cybersecurity
Information Security News & Events
South Africa is the most targeted country in Africa when it comes to infostealer and ransomware attacks. Being at the forefront of the continent’s digital transformation puts South Africa in the crosshairs for sophisticated cyberattacks

Read more...
SIEM rule threat coverage validation
Information Security News & Events
New AI-detection engineering assistant from Cymulate automates SIEM rule validation for SecOps and blue teams by streamlining threat detection engineering with automated testing, control integrations and enhanced detections.

Read more...
Winners of the 2025 Southern Africa OSPAs
Editor's Choice
The winners of the 2025 Southern Africa Outstanding Security Performance Awards (OSPAs) were revealed on Wednesday, 4th June, at Securex South Africa. Winners from all categories (except the Lifetime Achievement) will be featured in the second Global OSPAs set to take place in 2026.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.