FASTCash refers to a series of highly coordinated and financially motivated ATM cash-out operations orchestrated by **North Korean state-sponsored threat actors**, primarily the **BeagleBoyz**, a subset of HIDDEN COBRA activity, which overlaps with groups like Lazarus Group and APT38. This group first emerged in late 2016 and specializes in remotely compromising financial payment switch application servers to facilitate fraudulent transactions, enabling simultaneous cash withdrawals from ATMs across numerous countries globally. Their primary motivation is to generate illicit revenue for the North Korean regime. The defining characteristic of FASTCash operations is their unique method of manipulating **ISO 8583 financial transaction messages** to approve otherwise declined withdrawals, making their large-scale, concurrent cash-outs distinctive.

Aliases del actor

DTrack