Cobalt, also known by aliases such as Cobalt Group, Cobalt Gang, Cobalt Spider, GOLD KINGSWOOD, Mule Libra, and G0080, is a financially motivated cybercriminal organization that emerged around June 2016. Initially, the group focused on ATM jackpotting operations, systematically evolving its targeting to include broader financial systems such as card processing, payment systems, and SWIFT networks. The group is widely believed to operate out of Eastern Europe or Russia, with its primary motivation being the direct theft of funds rather than data extortion. What sets Cobalt apart is its consistent ability to adapt tactics and tools, maintaining activity even after the arrest of a key leader in 2018. The group has been linked to thefts estimated at €1 billion globally, demonstrating a persistent and significant threat to financial institutions worldwide. The group is often associated with or linked to the malware Carbanak and the FIN7 threat group.

Aliases del actor

COBALT SPIDERCobalt GangCobalt GroupG0080GOLD KINGSWOODMule LibraDark HaloNobeliumSilver Fishla penetración de sistemas críticosCOBALT GYPSYTwisted Kitten o APT34posiblemente operaciones de sabotajeDarkHydrusG0052incluyendo actividades relacionadas con espionajebrechas de seguridadParastooiKittensTA453Cobalt Mirageotroses considerado un actor estatal o semiestataldado su enfoque en operaciones de inteligenciaciberespionajeTEMPMagecart Group 4Point of SaleCriminalCarbanakCarbon SpiderG0008

Actores similares

cobalt-spideractor · 1Cobalt Groupthreat-actor · 1cobalt-dickensactor · 1COBALT DICKENSapt · 0Operation Cobalt Whisperapt · 0ExCobaltapt · 0COBALT KATANAapt · 0COBALT JUNOapt · 0Scattered Spiderthreat-actor · 2stone-pandaactor · 1