Common Information
Type Value
Value
G0061
Category Actor
Type Threat-Actor
Misp Type Cluster
Description FIN8 is a financially motivated group targeting the retail, hospitality and entertainment industries. The actor had previously conducted several tailored spearphishing campaigns using the downloader PUNCHBUGGY and POS malware PUNCHTRACK.
Details Published Attributes CTI Title
Details Website 2023-07-18 1 FIN8 deploys ALPHV ransomware using Sardonic malware variant
Details Website 2023-07-18 42 FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware
Details Website 2023-07-17 92 安全事件周报 2023-07-17 第29周
Details Website 2023-06-29 2 8Base ransomware gang escalates double extortion attacks in June - RedPacket Security
Details Website 2023-06-29 1 8Base Ransomware targets only companies neglecting privacy of employees and customers - Cybersecurity Insiders
Details Website 2023-06-28 4 8Base ransomware gang escalates double extortion attacks in June
Details Website 2023-04-20 481 ATT&CK Changes
Details Website 2022-08-23 1 Techstrong TV: How to Prepare for Highly Destructive Malware
Details Website 2022-02-01 39 White Rabbit Continued: Sardonic and F5 | Lodestone Security
Details Website 2022-01-21 3 This Week in Security News - January 21, 2022
Details Website 2022-01-21 3 This Week in Security News - January 21, 2022
Details Website 2022-01-18 6 New White Rabbit ransomware linked to FIN8 hacking group
Details Website 2022-01-18 7 New Ransomware Spotted: White Rabbit and Its Evasion Tactics
Details Website 2022-01-01 1 FIN8 APT Delivers BlackCat Ransomware Using Sardonic Backdoor Variant | Cyware Hacker News
Details Website 2021-08-25 1 FIN8 Threat Actor Spotted Once Again with New "Sardonic" Backdoor
Details Website 2021-07-27 27 Deep Dive Into A FIN8 Attack – A forensic investigation
Details Website 2021-03-15 7 FIN8: BADHATCH Threat Indicator Enrichment
Details Website 2020-01-09 42 SAIGON, the Mysterious Ursnif Fork | Mandiant
Details Website 2019-12-31 13 Fuel Pumps II – PoSlurp.B – One Night in Norfolk
Details Website 2019-07-25 1 FIN8 Reemerges with New PoS Malware Badhatch - Security News
Details Website 2019-07-23 1 Cybercrime gang adds new tactics to credit card data-stealing campaign
Details Website 2019-06-12 1 Ransomware halts production for days at major airplane parts manufacturer
Details Website 2019-01-24 7 Bypassing Network Restrictions Through RDP Tunneling | Mandiant
Details Website 2017-06-30 12 Obfuscation in the Wild: Targeted Attackers Lead the Way in Evasion Techniques | Mandiant