Attack Framework Example

It can be quite hard to visualise the theory involved when learning cyber. That’s why most analysts tend to follow the learn whilst doing approach. Not all of us can do that from home. So I’ve put together this article to show an example of the MITRE ATT&CK framework based off the room from THM Red Team Threat Intel.

Carbanak is a cybercriminal group that has used Carbanak malware to target financial institutions since at least 2013. Carbanak may be linked to groups tracked separately as Cobalt Group and FIN7 that have also used Carbanak malware.

Follow this link to bring up the specific attack-navigator for this specific attack:

Get Sam Steers’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

https://mitre-attack.github.io/attack-navigator//#layerURL=https%3A%2F%2Fattack.mitre.org%2Fgroups%2FG0008%2FG0008-enterprise-layer.json

From this link we can see the different stages and the specific techniques Carbanak used

Resources

https://attack.mitre.org/groups/G0008/