Skip to content

Hide Navigation Hide TOC

GCMAN (d93889de-b4bc-4a29-9ce7-d67717c140a0)

GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.

Cluster A Galaxy A Cluster B Galaxy B Level
GCMAN (d93889de-b4bc-4a29-9ce7-d67717c140a0) Threat Actor GCMAN - G0036 (0ea72cd5-ca30-46ba-bc04-378f701c658f) Intrusion Set 1
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern GCMAN - G0036 (0ea72cd5-ca30-46ba-bc04-378f701c658f) Intrusion Set 2
VNC - T1021.005 (01327cde-66c4-4123-bf34-5f258d59457b) Attack Pattern GCMAN - G0036 (0ea72cd5-ca30-46ba-bc04-378f701c658f) Intrusion Set 2
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 3
Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern VNC - T1021.005 (01327cde-66c4-4123-bf34-5f258d59457b) Attack Pattern 3