GCMAN

Reports per quarter

Techniques in ATT&CK

Listed by ATT&CK

• T1021.004
• T1021.005

No report from the last two years names a technique ID.

CVEs named in reports

• CVE-2015-0235
• CVE-2015-7547

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   GCMAN: how to steal $200 per minute

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor GCMAN: how to steal $200 per minute

2. 6 April 2026

   Metel Bank Robbers Borrowing from APT Attacks

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Metel Bank Robbers Borrowing from APT Attacks

3. 6 April 2026

   Fileless attacks against enterprise networks

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Fileless attacks against enterprise networks

4. 17 February 2016

   Russian Police Prevented Massive Banking Sector Cyber Attack

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Russian Police Prevented Massive Banking Sector Cyber Attack

5. 8 February 2016

   APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks

6. 8 February 2016

   APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor APT-style bank robberies increase with Metel, GCMAN and Carbanak 2.0 attacks

Newest first. Details opens the report in Explore.