The FASTCash malware tampers with messages between issuing and acquiring banking domains to turn rejected transactions into approved ones. The malware targets misconfigured implementations of the ISO 8583 financial messaging standard, which allow tampered messages to go undetected. The North Korean hacking group BeagleBoyz, a subset of government-backed group HiddenCobra, has employed the malware in numerous bank attacks worldwide since 2015.

APT35 Hacker Groups Internal Documents Leak Exposes their Targets and Attack Methods
In October 2025, a significant breach exposed the internal workings of APT35, also known as Charming Kitten, a cyber unit operating within Iran’s Islamic Revolutionary

