Bankshot (24b8471d-698f-48cc-b47a-8fbbaf28b293)
Bankshot is a remote access tool (RAT) that was first reported by the Department of Homeland Security in December of 2017. In 2018, Lazarus Group used the Bankshot implant in attacks against the Turkish financial sector. [McAfee Bankshot]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Lazarus Group (0bc66e95-de93-4de7-b415-4041b7191f08) | Tidal Groups | Bankshot (24b8471d-698f-48cc-b47a-8fbbaf28b293) | Tidal Software | 1 |