← Back to Actors
FIN5
FIN5
[FIN5](https://attack.mitre.org/groups/G0053) is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries. The group is made up of actors who likely speak Russian. (Citation: FireEye Respond Webinar July 2017) (Citation: Mandiant FIN5 GrrCON Oct 2016) (Citation: DarkReading FireEye FIN5 Oct 2015)
11
Techniques
11
Covered
0
Gaps
100%
Coverage
Coverage11/11
COVERED (11)
T1018Remote System Discovery46 det.T1059Command and Scripting Interpreter462 det.T1070.001Clear Windows Event Logs15 det.T1070.004File Deletion40 det.T1074.001Local Data Staging10 det.T1078Valid Accounts252 det.T1090.002External Proxy6 det.T1110Brute Force85 det.T1119Automated Collection11 det.T1133External Remote Services72 det.T1588.002Tool13 det.