FIN8
threat actor01
also known as
Other names and identifiers for this entity.
ATT&CK
FIN8 · Syssphinx
MISP
ATK113 · FIN8 · PUNCH COMET
FIN8 is a financially motivated group targeting the retail, hospitality and entertainment industries. The actor had previously conducted several tailored spearphishing campaigns using the downloader PUNCHBUGGY and POS malware PUNCHTRACK.
02
resolved ATT&CK groups
Threat groups associated with this.
03
techniques used (36)
ATT&CK techniques this enables or maps to.
showing 20 of 36
04
software used (11)
Malware and tools associated with this.
05
references
External citations — patches, advisories, analysis.
- https://www.fireeye.com/blog/threat-research/2016/05/windows-zero-day-payment-cards.html
- https://www2.fireeye.com/WBNR-Know-Your-Enemy-UNC622-Spear-Phishing.html
- https://www.root9b.com/sites/default/files/whitepapers/PoS%20Malware%20ShellTea%20PoSlurp.pdf
- https://afyonluoglu.org/PublicWebFiles/Reports-TR/2017%20FireEye%20M-Trends%20Report.pdf
- https://www.fireeye.com/blog/threat-research/2017/06/obfuscation-in-the-wild.html
- https://attack.mitre.org/groups/G0061
- https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/