GCMAN

G0036

About this group

GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.

Technique	Procedure example
T1021.004 SSH	GCMAN uses Putty for lateral movement. Securelist GCMAN
T1021.005 VNC	GCMAN uses VNC for lateral movement. Securelist GCMAN

None recorded.

None recorded.

Securelist GCMAN Open source
Kaspersky Lab's Global Research & Analysis Team. (2016, February 8). APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks. Retrieved April 20, 2016.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.