RUconfidence: 50G0008G0046
FIN7FIN7
Also known as: CARBON SPIDER · GOLD NIAGARA · Calcium · ATK32 · G0046 · G0008 · Coreid · Carbanak · Sangria Tempest · ELBRUS · Carbon Spider · JokerStash · FIN7
Origin
RU
Known aliases
13
Attribution
50
Profile
FIN7 is a Russian-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as CARBON SPIDER, GOLD NIAGARA, Calcium (and 9 more). Original record: Groups targeting financial organizations or people with significant financial assets.
Aliases· 13
CARBON SPIDERGOLD NIAGARACalciumATK32CoreidCarbanakSangria TempestELBRUSCarbon SpiderJokerStashFIN7
MITRE ATT&CK Group crosswalk
References
- https://en.wikipedia.org/wiki/Carbanak
- https://app.box.com/s/p7qzcury97tuwk26694uutujwqmwqyhe
- http://2014.zeronights.ru/assets/files/slides/ivanovb-zeronights.pdf
- https://web.archive.org/web/20161223002016/https://www.symantec.com/connect/blogs/odinaff-new-trojan-used-high-level-financial-attacks
- https://www.proofpoint.com/us/threat-insight/post/fin7carbanak-threat-actor-unleashes-bateleur-jscript-backdoor
- https://www.icebrg.io/blog/footprints-of-fin7-tracking-actor-patterns
- https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/
- https://www.europol.europa.eu/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.