threat actor

FIN6

unknownentity:threat_actor

FIN is a group targeting financial assets including assets able to do financial transaction including PoS.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

id: fin6
kind: threat actor
status: unknown
aliases: ATK88 · Camouflage Tempest · G0037 · GOLD FRANKLIN · ITG08 · Magecart Group 6 · MageCart Group 6 · Skeleton Spider · SKELETON SPIDER · SQUID COMET · Storm-0538 · TA4557 · TAAL · White Giant
jurisdictions: —
claims naming it: 0 · 0 attributions · 8 relations · 0 events

MITRE ATT&CK Enterpriserecords thatFIN6usesFlawedAmmyy
fetch —sha256 dc1639caa5501d72
rel_136btcintel:relations:136@v1 sha256:fcc6fe361b15ce94
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesGrimAgent
fetch —sha256 dc1639caa5501d72
rel_137btcintel:relations:137@v1 sha256:63ceaf1d9383dafd
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesFrameworkPOS
fetch —sha256 dc1639caa5501d72
rel_138btcintel:relations:138@v1 sha256:3695d68c94a3586a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesMore_eggs
fetch —sha256 dc1639caa5501d72
rel_139btcintel:relations:139@v1 sha256:dd9696b9b22f7a9f
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesCobalt Strike
fetch —sha256 dc1639caa5501d72
rel_140btcintel:relations:140@v1 sha256:b10f85cea8574212
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesMaze
fetch —sha256 dc1639caa5501d72
rel_141btcintel:relations:141@v1 sha256:46b2fd0c0a2773aa
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesLockerGoga
fetch —sha256 dc1639caa5501d72
rel_142btcintel:relations:142@v1 sha256:b72ef70a509daa47
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN6usesRyuk
fetch —sha256 dc1639caa5501d72
rel_143btcintel:relations:143@v1 sha256:e6d2ed1c130fe2f4
confidenceauthority data · 60

computedno dated events recorded for this entity

computedno current claim names this entity

computedno subject carries a claim naming this entity

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.