FIN13 — APT Profile
FIN13 is a financially motivated cyber threat group that has targeted the financial, retail, and hospitality industries in Mexico and Latin America, as early as 2016. FIN13 achieves its objectives by stealing intellectual property, financial data, mergers and acquisition information, or PII.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
Elephant Beetle, TG2003
Tools & malware
- certutil LOLBin
- Empire Post-Exploitation Framework
- Impacket Network Toolkit
- Mimikatz Credential Harvesting
Vendor research
- FIN13: A Cybercriminal Threat Actor Focused on Mexico Ta, V., et al
- TG2003: ELEPHANT BEETLE UNCOVERING AN ORGANIZED FINANCIAL-THEFT OPERATION Sygnia Incident Response Team
- TG2003: ELEPHANT BEETLE UNCOVERING AN ORGANIZED FINANCIAL-THEFT OPERATION Sygnia
- FIN13: A Cybercriminal Threat Actor Focused on Mexico Mandiant
Countries linked to this actor
- Mexico targets