G0061

G0061FIN8

Description

[FIN8](https://attack.mitre.org/groups/G0061) is a financially motivated threat group that has been active since at least January 2016, and known for targeting organizations in the hospitality, retail, entertainment, insurance, technology, chemical, and financial sectors. In June 2021, security researchers detected [FIN8](https://attack.mitre.org/groups/G0061) switching from targeting point-of-sale (POS) devices to distributing a number of ransomware variants.(Citation: FireEye Obfuscation June 2017)(Citation: FireEye Fin8 May 2016)(Citation: Bitdefender Sardonic Aug 2021)(Citation: Symantec FIN8 Jul 2023)

References

  1. https://attack.mitre.org/groups/G0061
  2. https://web.archive.org/web/20170923102302/https://www.fireeye.com/blog/threat-research/2017/06/obfuscation-in-the-wild.html
  3. https://www.bitdefender.com/files/News/CaseStudies/study/401/Bitdefender-PR-Whitepaper-FIN8-creat5619-en-EN.pdf
  4. https://www.fireeye.com/blog/threat-research/2016/05/windows-zero-day-payment-cards.html
  5. https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/syssphinx-fin8-backdoor

Software attributed to this4

TypeTargetConfidenceTier
SoftwarePUNCHBUGGYs0196100%live
SoftwareBADHATCHs108195%live
SoftwareSardonics108595%live
SoftwarePUNCHTRACKs019795%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Group
FIN6
Group
FIN7
Group
FIN10
Group
FIN4
Group
FIN13
Group
FIN5
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.