G0037
FIN6FIN6
Also known as: SKELETON SPIDER · ITG08 · MageCart Group 6 · White Giant · GOLD FRANKLIN · ATK88 · G0037 · Camouflage Tempest · TA4557 · Storm-0538 · FIN6
Known aliases
11
Profile
FIN6 is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as SKELETON SPIDER, ITG08, MageCart Group 6 (and 7 more). Original record: FIN is a group targeting financial assets including assets able to do financial transaction including PoS.
Aliases· 11
SKELETON SPIDERITG08MageCart Group 6White GiantGOLD FRANKLINATK88Camouflage TempestTA4557Storm-0538FIN6
MITRE ATT&CK Group crosswalk
References
- https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf
- https://www.fireeye.com/blog/threat-research/2019/04/pick-six-intercepting-a-fin6-intrusion.html
- https://attack.mitre.org/groups/G0037/
- https://securityintelligence.com/posts/more_eggs-anyone-threat-actor-itg08-strikes-again/
- http://www.secureworks.com/research/threat-profiles/gold-franklin
- https://www.crowdstrike.com/resources/reports/2019-crowdstrike-global-threat-report/
- https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta4557-targets-recruiters-directly-email
- https://www.proofpoint.com/us/threat-insight/post/fake-jobs-campaigns-delivering-moreeggs-backdoor-fake-job-offers
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.