threat actor

FIN7

unknownentity:threat_actor

Groups targeting financial organizations or people with significant financial assets.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: fin7
kind: threat actor
status: unknown
aliases: ATK32 · Calcium · Carbanak · Carbon Spider · CARBON SPIDER · Coreid · ELBRUS · G0008 · G0046 · GOLD NIAGARA · ITG14 · JokerStash · Sangria Tempest · WILD COMET
jurisdictions: —
claims naming it: 0 · 0 attributions · 15 relations · 0 events

Identifiers

attack G0046via mitre-attack
misp-galaxy 00220228-a5a4-4032-a30d-826bb55aa3fbvia misp-galaxy-threat-actor

Relations

MITRE ATT&CK Enterpriserecords thatFIN7usesGRIFFON
fetch —sha256 dc1639caa5501d72
rel_153btcintel:relations:153@v1 sha256:2f66316ca3addb9b
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesJSS Loader
fetch —sha256 dc1639caa5501d72
rel_154btcintel:relations:154@v1 sha256:8b13bd8726b986a5
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesHALFBAKED
fetch —sha256 dc1639caa5501d72
rel_155btcintel:relations:155@v1 sha256:b2f250ac68c1570a
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesREvil
fetch —sha256 dc1639caa5501d72
rel_156btcintel:relations:156@v1 sha256:592dddf6ce202998
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesCarbanak
fetch —sha256 dc1639caa5501d72
rel_157btcintel:relations:157@v1 sha256:d56fb5fecb441f01
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesPillowmint
fetch —sha256 dc1639caa5501d72
rel_158btcintel:relations:158@v1 sha256:86a6e65318a841e7
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesCobalt Strike
fetch —sha256 dc1639caa5501d72
rel_159btcintel:relations:159@v1 sha256:1388a44ab87ebdbc
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesMaze
fetch —sha256 dc1639caa5501d72
rel_160btcintel:relations:160@v1 sha256:18354922d5aa4d2d
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesPOWERSOURCE
fetch —sha256 dc1639caa5501d72
rel_161btcintel:relations:161@v1 sha256:de77e33caabb8199
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesRDFSNIFFER
fetch —sha256 dc1639caa5501d72
rel_162btcintel:relations:162@v1 sha256:1fb992af0876a30d
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesSQLRat
fetch —sha256 dc1639caa5501d72
rel_163btcintel:relations:163@v1 sha256:95fcfa80e15ba460
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesLizar
fetch —sha256 dc1639caa5501d72
rel_164btcintel:relations:164@v1 sha256:8939e10436a095f6
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesTEXTMATE
fetch —sha256 dc1639caa5501d72
rel_165btcintel:relations:165@v1 sha256:ea8b57142b5cf982
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesBOOSTWRITE
fetch —sha256 dc1639caa5501d72
rel_166btcintel:relations:166@v1 sha256:d5600101e35229a1
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatFIN7usesSystemBC
fetch —sha256 dc1639caa5501d72
rel_167btcintel:relations:167@v1 sha256:a72eff0d6682f29b
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.