MITRE ATT&CKgroup
G0051 FIN10
- Domain
- enterprise
- Version
- 1.3
- Created
- 2017-12-14
Description
FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations.
Related
Uses · MITRE ATT&CK (12)
- T1588.002 Tool sub-technique
- T1078.003 Local Accounts sub-technique
- T1570 Lateral Tool Transfer technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1021.001 Remote Desktop Protocol sub-technique
- T1070.004 File Deletion sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1053.005 Scheduled Task sub-technique
- S0363 Empire software (tool)
- T1033 System Owner/User Discovery technique
- T1078 Valid Accounts technique
References
- https://services.google.com/fh/files/misc/rpt-fin-10-anatomy-of-a-cyber-en.pdf FireEye FIN10 June 2017