The Cobalt hacker group is still active, although the leader was arrested

The Russian security company Group-IB recently discovered that the Cobalt hacking organization, which specializes in a theft of funds from banks and financial institutions, is still active. Although its leader was arrested in Spain two months ago, however, its members continue to launch new attacks against financial organizations and other companies around the world.

Image: Group-IB

The new event began on the 23rd of last week when Group-IB security experts discovered Cobalt’s phishing emails for banks in Russia and other former Soviet countries. According to a report shared by Group-IB, this phishing email was designed to disguise Kaspersky Lab’s security alerts and lure users to visit malicious websites, thereby infecting CobInt Trojans.

Group-IB said that despite the arrest of Cobalt’s leaders, the group still has a hacking power that cannot be ignored because its members do not seem to plan to stop their attacks on banks in the short term.

Source: Bleeping Computer