FIN5 — APT Profile
FIN5 is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries. The group is made up of actors who likely speak Russian.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
G0053
Tools & malware
- FLIPSIDE POS Malware
- PsExec Remote Execution
- pwdump Credential Harvesting
- RawPOS POS Malware
- SDelete Defense Evasion
- Windows Credential Editor Credential Harvesting
Vendor research
- Are you Ready to Respond? (Webinar) Scavella, T. and Rifki, A
- Are you Ready to Respond? (Webinar) Scavella, T. and Rifki, A
- Attacking the Hospitality and Gaming Industries: Tracking an Attacker Around the World in 7 Years Mandiant
- Prolific Cybercrime Gang Favors Legit Login Credentials DarkReading
- Are you Ready to Respond? (Webinar) FireEye