UNC2891’s ATM Fraud Operation Was Way Bigger Than We Thought
The UNC2891 threat group conducted three separate attacks against Indonesian banks between 2022 and 2024 using sophisticated malware and an extensive money mule network. Their operation included CAKETAP rootkit manipulation of ATM verification processes and persistent backdoors on dozens of compromi