Common Raven
OPERA1ERNXSMSDESKTOP-GROUP
Threat actor Common Raven has been actively targeting financial sector institutions, compromising their SWIFT payment infrastructure to send out fraudulent payments.
source: misp-galaxy3 refs →
Common Raven
Common Raven is a threat actor targeting financial SWIFT infrastructure for fraudulent money transfers.
Analyst brief
Common Raven (also tracked as OPERA1ER, NXSMS, DESKTOP-GROUP) is a threat actor actively targeting financial sector institutions. Their primary objective is to compromise the victim's SWIFT payment infrastructure to conduct fraudulent money transfers. Defenders must focus on enhanced monitoring of SWIFT systems for anomalies, suspicious administrative activity, and unauthorized transaction requests.
unknown
FAQ2
Which sector is primarily targeted by the Common Raven threat actor?
Common Raven primarily targets financial sector institutions.
What infrastructure does Common Raven aim to compromise?
Common Raven aims to compromise the victim's SWIFT payment infrastructure to conduct fraudulent money transfers.
See also5
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.