High-tech hackers stole $300 million from 100 banks. But here’s what the media forgot to tell you

This weekend, the New York Times published details of a high-tech criminal campaign which saw banks in Russia, Japan, Europe and the United States hit by a major malware attack and the theft of millions of dollars.

The story, which emerged from a Kaspersky report that was shared with the newspaper before its official publication, naturally received the attention of others in the media:

Kaspersky’s Chris Doggett told the New York Times that the attack – perpetrated by the so-called “Carbanak” gang – was “likely the most sophisticated attack the world has seen to date in terms of the tactics and methods that cybercriminals have used to remain covert.”

Back in December, I described how a Russian hacking gang had stolen millions from banks, targeting e-payment systems and even installing malware on ATM management infrastructure that resulted in theft from cash machines.

That gang was named “Anunak” by researchers at Group-IB and Fox-IT, who first uncovered the campaign, which was also reported by the likes of Forbes at the time.

Carbanak? Anunak? What’s in a name?

My suspicion is that Anunak and Carbanak are one and the same gang. Kaspersky’s report may have grabbed the attention of the likes of the New York Times, but right now it appears that what’s “new” is only that more banks were hit by the hackers than previously confirmed, and more money stolen.

It’s a shame that the New York Times doesn’t reference the earlier research done by Fox-IT and Group-IB, and instead gives all the spotlight to Kaspersky’s researchers.

Whoever discovered what, one thing is for certain. Banks need to keep their wits about them and treat security as a high priority, as hackers become ever more sophisticated and audacious in their attempts to steal cash.

Update 16 February 2015: Fox-IT has confirmed that Anunak and Carbanak are one and the same.

Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.

Graham Cluley •   @gcluley

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.