Anunak, Russian/Ukraine Bank Hackers

An ATM gang has stolen more than $15 million from Eastern European banks, To gain a foothold inside financial institutions, the “Anunak group” — sent bank employees targeted, malware-laced emails made to look like the missives were sent by Russian banking regulators. The phishing emails contained malicious software designed to exploit recently-patched security holes in Microsoft Office products.

The group also reportedly bought access to Windows PCs at targeted banks that were already compromised by opportunistic malware spread by other cyber criminals. The Anunak gang routinely purchased installations of their banking malware from other cybercriminals who operated massive botnets.

Here is Group iB’s report