ITG08 (aka FIN6) Partners With TrickBot Gang, Uses Anchor Framework
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Data Direct Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Powershell - T1059.001 Software - T1592.002 Masquerading - T1036 Powershell - T1086 Windows Management Instrumentation - T1047 Masquerading
Show in Graph
Common Information
Type Value
UUID e6d8bb45-e9ea-4261-8d9c-8c0be4733e49
Fingerprint 65011dd738b18543
Analysis status DONE
Considered CTI value 1
Text language
Published April 7, 2020, 6:30 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline UNKNOWN
Title ITG08 (aka FIN6) Partners With TrickBot Gang, Uses Anchor Framework
Detected Hints/Tags/Attributes 72/2/2
Source URLs
Redirection Url
Details Source https://securityintelligence.com/posts/itg08-aka-fin6-partners-with-trickbot-gang-uses-anchor-framework/
URL Provider
Details Provider Source level domain
Details securityintelligence.com securityintelligence.com
Attributes
Details Type #Events CTI Value
Details IBM X-Force - Threat Group Enumeration 9 
ITG08
Details Threat Actor Identifier - FIN 73 
FIN6