← Back to Actors
FIN5
FIN5
[FIN5](https://attack.mitre.org/groups/G0053) is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries. The group is made up of actors who likely speak Russian. (Citation: FireEye Respond Webinar July 2017) (Citation: Mandiant FIN5 GrrCON Oct 2016) (Citation: DarkReading FireEye FIN5 Oct 2015)
12
Techniques
12
Covered
0
Gaps
100%
Coverage
Coverage12/12
COVERED (12)
T1018Remote System Discovery50 det.T1059Command and Scripting Interpreter486 det.T1070.001Clear Windows Event Logs16 det.T1070.004File Deletion42 det.T1074.001Local Data Staging10 det.T1078Valid Accounts280 det.T1090.002External Proxy6 det.T1110Brute Force90 det.T1119Automated Collection12 det.T1133External Remote Services72 det.T1588.002Tool13 det.T1685.005Clear Windows Event Logs11 det.