FIN8
Syssphinx
UnattributedNo public state or group attribution on record
FIN8 is a financially motivated threat group that has been active since at least January 2016, and known for targeting organizations in the hospitality, retail, entertainment, insurance, technology, chemical, and financial sectors. In June 2021, security researchers detected FIN8 switching from targeting point-of-sale (POS) devices to distributing a number of ransomware variants.
MITRE ATT&CK Techniques
Associated Malware
BADHATCHImpacketNetNltestPUNCHBUGGYPUNCHTRACKPingPsExecRagnar LockerSardonicdsquery
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.