A financially motivated attack group that targeted at least 30 financial institutions in Russia. They infected the banks’ corporate networks via e-mail with a modular malware program. This program allowed them to gain access to the computers within the bank’s IT systems, so that they could then “rollback” ATM transactions.