GCMAN
MITRE ATT&CK: G0036 View on attack.mitre.org
Aliases: GCMAN
- First seen
- 2014-01-01 00:00:00
- Origin
- RU
- Primary motivation
- financial-gain
- Sophistication
- intermediate
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:32:09
Targeted industries: financial-services
Context
GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.
Detection coverage
- 6 Sigma rules
Malware & tools used
- VNC (attack-pattern)
- SSH (attack-pattern)
Reports & references
- Kaspersky — 73638 (report)
- MITRE ATT&CK — G0036 (report)