FIN10 is a financially motivated cyber extortion group first observed as early as 2013, with activity continuing through at least 2016. The group's primary motivation is the theft of corporate business data and personally identifiable information, which they use to extort victim organizations for financial gain. FIN10 distinguishes itself by exclusively using publicly available software and tools, such as Metasploit, PowerShell Empire, and SplinterRAT, rather than developing custom malware. If ransom demands are not met, the group escalates its tactics by publicly leaking stolen data and, in some cases, deploying destructive batch scripts to delete critical operating system files and shut down systems. FIN10 has attempted to masquerade as various hacktivist groups, including 'Angels_Of_Truth' and 'Tesla Team', though evidence suggests their communications were translated.

Aliases del actor

FIN10G0051"Casinospero sin evidencia directa

Actores similares

sinobiransomware · 274dark-basinactor · 1Password Guessingactor · 1Malvertisingactor · 1Identify Business Tempoactor · 1vanhelsingactor · 1VanHelsingransomware · 1singhealth---shimratactor · 1hellsing-aptactor · 1singing-spideractor · 1