Cybercrime Groups 77 articles

Summary FIN13 is a financially motivated cybercrime group known for conducting sophisticated application-layer attacks, primarily targeting financial institutions and payment systems worldwide. The group specializes in deploying custom malware and…

Summary FIN15 is a financially motivated cyber threat group known for targeting organizations through sophisticated application-layer attacks. The group primarily focuses on exploiting vulnerabilities in web applications and financial software…

Summary FIN16 is a financially motivated cyber threat group known for targeting organizations through sophisticated application-layer attacks. The group primarily focuses on compromising financial institutions and enterprises to conduct fraud,…

Summary FIN17 is a financially motivated cybercrime group known for conducting sophisticated application attacks targeting financial institutions and payment systems worldwide. The group primarily focuses on exploiting vulnerabilities in banking…

Summary FIN18 is a financially motivated cyber threat group known for targeting organizations primarily in the financial sector through sophisticated application-layer attacks. The group employs advanced techniques such as web…

Summary FIN19 is a financially motivated cyber threat group known for targeting organizations primarily in the retail and hospitality sectors. The group employs sophisticated application-layer attacks, including point-of-sale (POS) malware…

Summary FIN20 is a financially motivated cyber threat group known for conducting sophisticated application-layer attacks targeting financial institutions and enterprises. The group primarily focuses on exploiting vulnerabilities in web applications…

Summary FIN21 is a sophisticated malware family primarily used in financially motivated cyberattacks targeting organizations worldwide. It is known for its modular design, enabling attackers to deploy various payloads such…

Summary FIN22 is a financially motivated cyber threat group known for targeting financial institutions and related organizations through sophisticated application-layer attacks. The group primarily focuses on exploiting vulnerabilities in banking…

Summary FIN23 is a sophisticated application-layer attack targeting financial software systems, designed to exploit vulnerabilities in transaction processing and authentication mechanisms to facilitate unauthorized fund transfers and data breaches. Key…

Summary FIN4 is a financially motivated cyber threat group known for targeting publicly traded companies to gain access to sensitive information, particularly related to mergers and acquisitions, earnings reports, and…

Summary FIN5 is a financially motivated cybercriminal group known for targeting organizations primarily in the retail, hospitality, and financial sectors. The group specializes in deploying sophisticated malware to conduct point-of-sale…

Summary FIN6 is a financially motivated cybercriminal group known for targeting the retail and hospitality sectors primarily through application-layer attacks. The group specializes in compromising point-of-sale (POS) systems and payment…

Summary FIN7 is a sophisticated cybercriminal group known for conducting financially motivated attacks primarily targeting the retail, hospitality, and financial sectors. The group employs advanced malware and social engineering techniques…

Summary FIN8 is a financially motivated cybercriminal group known for targeting organizations primarily in the retail, hospitality, and healthcare sectors. The group specializes in sophisticated application attacks, particularly focusing on…

Summary FIN9 is a financially motivated cybercriminal group known for targeting organizations primarily in the retail, hospitality, and healthcare sectors. The group specializes in sophisticated application attacks, often deploying custom…

Summary Genesis Market operators are individuals or groups responsible for managing and maintaining Genesis Market, a cybercriminal marketplace specializing in the sale of stolen digital identities and credentials. These operators…

Summary GoldPickaxe is a sophisticated application attack technique targeting software development environments and continuous integration/continuous deployment (CI/CD) pipelines. It involves the insertion of malicious code or backdoors into source code…

Summary GoldSouthfield is a sophisticated cyber espionage group known for conducting targeted application attacks primarily against organizations in the Middle East. The group employs advanced malware and social engineering techniques…

Summary GoldWaterfall is a sophisticated application-layer attack targeting web applications by exploiting vulnerabilities in session management and input validation mechanisms. It enables attackers to execute unauthorized actions, escalate privileges, and…