FIN7
threat actorRU01
also known as
Other names and identifiers for this entity.
ATT&CK
Carbon Spider · ELBRUS · FIN7 · GOLD NIAGARA · ITG14 · Sangria Tempest
MISP
ATK32 · CARBON SPIDER · Calcium · Carbanak · Coreid · ELBRUS · FIN7 · GOLD NIAGARA · JokerStash · Sangria Tempest · WILD COMET
Groups targeting financial organizations or people with significant financial assets.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (67)
ATT&CK techniques this enables or maps to.
showing 20 of 67
04
software used (19)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://en.wikipedia.org/wiki/Carbanak
- https://app.box.com/s/p7qzcury97tuwk26694uutujwqmwqyhe
- http://2014.zeronights.ru/assets/files/slides/ivanovb-zeronights.pdf
- https://web.archive.org/web/20161223002016/https://www.symantec.com/connect/blogs/odinaff-new-trojan-used-high-level-financial-attacks
- https://www.proofpoint.com/us/threat-insight/post/fin7carbanak-threat-actor-unleashes-bateleur-jscript-backdoor
- https://www.icebrg.io/blog/footprints-of-fin7-tracking-actor-patterns
- https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/
- https://www.europol.europa.eu/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain