- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Motivation
- Financial crime
- Seen
- 2016–2026
- Status
- Active
- ATT&CK
- G0051 · 11 techniques
- Sources
- 9 sources carry it
- Identifier
- GINC-APT-0087 · fin10
What it is
FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- MITRE ATT&CK
- G0051
Targets
- Countries
- Canada, United States
- Sectors
- Casinos and Gambling, Mining
Tools
The tools and malware families the sources tie to it.
- Back Orifice
- Back Orifice 2000
- CrossRat
- Empire
- EmpireProject
- KOMPROGO
- SHUTTERSPEED
- Windows Remote Desktop
Sources
- MITRE ATT&CK attack.mitre.org
- ETDA Threat Group Card apt.etda.or.th
- Malpedia malpedia.caad.fkie.fraunhofer.de