Threat actor · G0046

FIN7

GOLD NIAGARAITG14Carbon SpiderELBRUSSangria Tempest

UnattributedFinancially motivated criminal group

FIN7 is a financially-motivated threat group that has been active since 2013. FIN7 has targeted the retail, restaurant, hospitality, software, consulting, financial services, medical equipment, cloud services, media, food and beverage, transportation, pharmaceutical, and utilities industries in the United States. A portion of FIN7 was operated out of a front company called Combi Security and often used point-of-sale malware for targeting efforts.

MITRE ATT&CK Techniques

Associated Malware

AdFindBOOSTWRITECarbanakCobalt StrikeCrackMapExecGRIFFONHALFBAKEDJSS LoaderLizarMazeMimikatzPOWERSOURCEPillowmintPowerSploitRDFSNIFFERREvilSQLRatSystemBCTEXTMATE

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.