Threat Actor
GCMAN
Also known as: GCMAN
GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.
2
Techniques
0
indicators on this record
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--0ea72cd5-ca30-46ba-bc04-378f701c658f
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T00:42:30+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (2)
▸
SSH (T1021.004)
Adversaries may use Valid Accounts to log into remote machines using Secure Shell (SSH). The adversary ma
▸
VNC (T1021.005)
Adversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC). V
Explore this actor's full graph with Ninja Signal