Fingers point to Lazarus, Cobalt, FIN7 as key hacking groups attacking finance industry
TinyBanker/Tinba, Dridex, Anubis, Trickbot, and Kronos Trojans are commonly associated with financial service attacks, and some of these malware may also be used to execute second-stage ransomware.