Dissecting IBAN Clipper
ID: 11d8b5ad-bd17-52d1-9671-0d1bc8d229a6
STIX ID: report--11d8b5ad-bd17-52d1-9671-0d1bc8d229a6
Feed Name: Cyble Blog
Threat Score
*Cyble Research Labs describes an IBAN Clipper malware for Windows that monitors the clipboard to detect and replace IBAN bank account numbers with attacker-controlled values, fetches replacement IBANs from a remote server, establishes persistence via the startup folder and Run registry entries, provides sample hashes as IoCs, maps observed behaviors to MITRE ATT&CK techniques, and gives remediation and detection recommendations.*
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
