💰 Financial Crime theater

Covers financially motivated crime — banking trojans, BEC, wire fraud, carding, and ATM jackpotting — run by professional cybercrime syndicates. Protects financial institutions and payment rails by fusing malware C2, mule networks, and money-movement typologies.

🏹 Threat Actors

🦠 Malware & Tools

🧭 Intelligence disciplines

📚 Priority sources & datasets

🔄 Live Datasets & APIs (10 key-free · ingestible)

📜 Financial Crime Playbook

1. Ingest fraud reports, C2 feeds, and transaction telemetry from IC3, FinCEN filings, and abuse.ch on financially motivated activity.
2. Enrich and deduplicate indicators, resolving mule accounts, cash-out infrastructure, and malware C2 into campaigns.
3. Analyze money-movement typologies (BEC, wire fraud, ATM jackpotting, carding) and link them to intrusion sets.
4. Attribute campaigns to financial threat groups (FIN7, Evil Corp, TA505, Cobalt) using TTP and infrastructure overlap.
5. Brief financial institutions, FS-ISAC, and law enforcement with indicators and typology alerts.
6. Push blocklists, freeze mule accounts, and file SAR and asset-seizure referrals.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

🔗 Cross-domain pivots