Police arrested a number of well-known cybercrime group members responsible for Carbanak/Cobalt and Fin7, among others. The most active actor of 2018 was Lazarus, which is gradually expanding its arsenal of tools and looking for new targets. The area of interest today includes banks, fin-tech companies, crypto-exchanges, PoS terminals, ATMs, and in terms of geography, we have recorded infection attempts in dozens of countries, most of which are located in Asia, Africa and Latin America.”]