FIN6
threat actor01
also known as
Other names and identifiers for this entity.
ATT&CK
Camouflage Tempest · FIN6 · ITG08 · Magecart Group 6 · Skeleton Spider · TAAL
MISP
ATK88 · Camouflage Tempest · FIN6 · GOLD FRANKLIN · ITG08 · MageCart Group 6 · SKELETON SPIDER · SQUID COMET · Storm-0538 · TA4557 · White Giant
FIN is a group targeting financial assets including assets able to do financial transaction including PoS.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (40)
ATT&CK techniques this enables or maps to.
showing 20 of 40
04
software used (12)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf
- https://www.fireeye.com/blog/threat-research/2019/04/pick-six-intercepting-a-fin6-intrusion.html
- https://attack.mitre.org/groups/G0037/
- https://securityintelligence.com/posts/more_eggs-anyone-threat-actor-itg08-strikes-again/
- http://www.secureworks.com/research/threat-profiles/gold-franklin
- https://www.crowdstrike.com/resources/reports/2019-crowdstrike-global-threat-report/
- https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta4557-targets-recruiters-directly-email
- https://www.proofpoint.com/us/threat-insight/post/fake-jobs-campaigns-delivering-moreeggs-backdoor-fake-job-offers