← Back to Actors
FIN5
FIN5
[FIN5](https://attack.mitre.org/groups/G0053) is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries. The group is made up of actors who likely speak Russian. (Citation: FireEye Respond Webinar July 2017) (Citation: Mandiant FIN5 GrrCON Oct 2016) (Citation: DarkReading FireEye FIN5 Oct 2015)
12
Techniques
12
Covered
0
Gaps
100%
Coverage
Coverage12/12
COVERED (12)
T1018Remote System Discovery51 det.T1059Command and Scripting Interpreter514 det.T1070.001Clear Windows Event Logs16 det.T1070.004File Deletion43 det.T1074.001Local Data Staging10 det.T1078Valid Accounts297 det.T1090.002External Proxy8 det.T1110Brute Force90 det.T1119Automated Collection12 det.T1133External Remote Services74 det.T1588.002Tool13 det.T1685.005Clear Windows Event Logs12 det.