Skip to content

FIN10

FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations.

ATT&CK ID: G0051
Techniques: 9
Tools: 1

Techniques

Resource Development

Obtain Capabilities

Initial Access

Execution

Scheduled Task/Job Command and Scripting Interpreter

Persistence

Scheduled Task/Job Valid Accounts Boot or Logon Autostart Execution

Privilege Escalation

Scheduled Task/Job Valid Accounts Boot or Logon Autostart Execution

Stealth

Indicator Removal Valid Accounts

Discovery

System Owner/User Discovery

Lateral Movement

Remote Services Lateral Tool Transfer

Software

Empire

MITRE ATT&CK All threat actors