FIN5

Threat actor

Targets

Sectors: Hospitality

Source: MITRE ATT&CK

Known techniques

T1018Remote System Discovery
T1059Command and Scripting Interpreter
T1070.004File Deletion
T1074.001Local Data Staging
T1078Valid Accounts
T1090.002External Proxy
T1110Brute Force
T1119Automated Collection
T1133External Remote Services
T1588.002Tool
T1685.005Clear Windows Event Logs

Source: MITRE ATT&CK

Malware and tools used

FLIPSIDE PsExec pwdump RawPOS SDelete Windows Credential Editor

Source: MITRE ATT&CK

Recent news

No stories yet.