More than 140 enterprisesprimarily banks, government organizations, and telecommunications firms in 40 countries, including the U.S., France, and Ecuadorhave been affected. The attackers, who may be connected to the GCMAN and Carbanak groups, arent using signature-based malware to carry out their attackers, instead theyre using fileless malware hidden in the memory of the affected servers. According to researchers, the attackers used a known exploit for an unpatched vulnerability.”]

