Skip to content

FIN13

FIN13 is a financially motivated cyber threat group that has targeted the financial, retail, and hospitality industries in Mexico and Latin America, as early as 2016. FIN13 achieves its objectives by stealing intellectual property, financial data, mergers and acquisition information, or PII.

ATT&CK ID: G1016
Techniques: 42
Tools: 4

Also tracked as Elephant Beetle

Vulnerabilities it has exploited

Techniques

Reconnaissance

Gather Victim Identity Information Gather Victim Network Information

Resource Development

Develop Capabilities Obtain Capabilities

Initial Access

Valid Accounts External Remote Services Exploit Public-Facing Application

Execution

Windows Management Instrumentation Scheduled Task/Job Command and Scripting Interpreter Hijack Execution Flow

Persistence

Scheduled Task/Job Valid Accounts Account Manipulation External Remote Services Create Account Server Software Component Boot or Logon Autostart Execution Modify Authentication Process

Privilege Escalation

Scheduled Task/Job Valid Accounts Account Manipulation Access Token Manipulation Boot or Logon Autostart Execution

Stealth

Masquerading Valid Accounts Access Token Manipulation Deobfuscate/Decode Files or Information Hide Artifacts Hijack Execution Flow

Defense Impairment

Modify Authentication Process

Credential Access

OS Credential Dumping Input Capture Unsecured Credentials Modify Authentication Process

Discovery

System Network Configuration Discovery Network Service Discovery System Network Connections Discovery Permission Groups Discovery System Information Discovery File and Directory Discovery Account Discovery Network Share Discovery

Lateral Movement

Remote Services Use Alternate Authentication Material

Collection

Data from Local System Input Capture Data Staged Archive Collected Data

Command and Control

Application Layer Protocol Proxy Ingress Tool Transfer Protocol Tunneling

Impact

Data Manipulation Financial Theft

Software

Empire · Impacket · Mimikatz · certutil

MITRE ATT&CK All threat actors