A new downloader, which has been spotted in an array of recent email campaigns, uses anti-analysis techniques and calls in a system fingerprinting module.

The FBI says Business Email Compromise scams are growing at astronomical rates, and businesses have lost $5.3 billion since 2013; $346 million in the U.S. alone in the second half of 2016.

Carbanak has moved away from its exclusive focus on financial services, branching out to attacks against hospitality and retail.

Carbanak has surfaced again with new campaigns using Google hosted services such as Forms and Sheets as command and control channels.