Secrets of Cobalt

Group-IB's report documents the Cobalt group's global campaign against financial institutions since 2016, detailing spear-phishing delivery of Cobalt Strike payloads, in‑memory execution, lateral movement into payment/SWIFT systems, persistence mechanisms, AV and network evasion, and real-world thefts (e.g., over $2M from ATM jackpotting); the report outlines detection and mitigation guidance for banks.