Cobalt Group
Cobalt Group is a Russia-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 32 countries, including the United States and the United Kingdom. It uses 69 MITRE ATT&CK techniques and exploits 17 known CVEs.
Also known as
- GOLD KINGSWOOD
- Cobalt Gang
- Cobalt Spider
- ATK 67
- TAG-CR3
- Mule Libra
- G0080
- Origin
- Russia
- Techniques
- 69
- Exploited CVEs
- 17
- First seen
- Jan 1, 2016
- Last seen
- Mar 2, 2020
- Record updated
Who They Target.
Sectors · 13
Countries · 32
About Cobalt Group.
Cobalt Group is a financially motivated threat group that has primarily targeted financial institutions since at least 2016. The group has conducted intrusions to steal money via targeting ATM systems, card processing, payment systems and SWIFT systems.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.