Cyber crime syndicate targets financial sector

A number of financial services firms and cryptocurrency exchanges have been targets in attacks conducted by a global cyber crime syndicate known as Hidden Cobra.

Last week, cyber security software provider McAfee released a statement warning that a form of malware known as Bankshot had been found within the Turkish financial system.

According to the statement, the Bankshot malware program was first found in 2017 and “is designed to persist on a victim’s network for further exploitation”, giving complete control of the compromised device to the hacker.

“The McAfee Advanced Threat Research team discovered that the cyber crime group Hidden Cobra continues to target cryptocurrency and financial organisations,” the statement said.


“We observed the return of Hidden Cobra’s Bankshot malware implant surfacing in the Turkish financial system. Based on the code similarity, the victim’s business sector and the presence of control server strings, this attack resembles previous attacks by Hidden Cobra conducted against the global financial network SWIFT.”

The software infects devices through a word document designed to look like “an agreement template for bitcoin distribution between an unknown individual in Paris and a to-be-determined cryptocurrency exchange”, the statement said.

Cyber crime syndicate targets financial sector
Hidden Cobra, cybercrime, hacking, cryptocurrency,
ifa logo

Subscribe to the ifa bulletin

Receive daily online news,analysis, reports and business strategies
By signing up you agree to our Terms of Use and Privacy Policy

Website Notifications

Get notifications in real time and stay up to date with content that matters to you.