DarkCasino
- Primary motivation
- financial-gain
- Sophistication
- advanced
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:08:46
Targeted industries: financial-services retail-and-hospitality technology-and-telecommunications
Context
DarkCasino is an economically motivated APT group that targets online trading platforms, including cryptocurrencies, online casinos, network banks, and online credit platforms. They are skilled at stealing passwords to access victims' online accounts and have been active for over a year. DarkCasino exploits vulnerabilities, such as the WinRAR vulnerability CVE-2023-38831, to launch phishing attacks and steal online property.
Exploited vulnerabilities
- CVE-2023-38831 (vulnerability)
Reports & references
- nsfocusglobal.com — The New Apt Group Darkcasino And The Global Surge In Winrar 0 Day Exploits (report)