Banca Comercială Carpatica SA

Banca Comercială Carpatica SA is a commercial bank headquartered in Romania. As a financial institution, it engages in the core activities of accepting deposits and extending credit. The bank serves both individual customers and corporate clients within the Romanian market. Its operations are aligned with the standard regulatory framework governing banks in the country. The institution provides typical banking products such as account management, payment processing, and loan facilities. These services support the everyday financial needs of its retail and business clientele.

The bank came to public attention in August 2018 when it was targeted by the financially motivated threat actor known as Cobalt Group. The attack involved a spear‑phishing campaign that used malicious URLs to deliver weaponized documents and disguised binaries. This led to the deployment of JavaScript backdoors and reconnaissance malware on the bank’s systems. The malware established persistence via registry keys and used encrypted communication channels to connect to command‑and‑control infrastructure. The incident highlighted the bank’s exposure to sophisticated cyber threats aimed at financial theft. Despite the breach, the institution continues to operate as a licensed commercial bank in Romania.