Financially Motivated Threat Actors: their TTP and interests in conducting targeted attacks against Canadian Businesses

Nicholas Palmer and Dmitri Volkov

Financially motivated Russian speaking threat actors have been evolving in recent years to target not only SWIFT systems, but also payment gateways, ATMs and Card Processing systems. In this discussion, Group-IB will prevent their investigations into the tactics, techniques and procedures of Russian speaking threat actors who targeted the Canadian financial sector and present research not available in public sources which can be shared with Countermeasures participants to protect their businesses from attack.