Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

FIN8

1 incidentes 1 paises 1 sectores threat-actor RU Ultimo: 2026-05-25

Aliases: Syssphinx, Powersniff, PUNCHBUGGY, ShellTea, lo que refleja su enfoque en ataques basados en macros

Ver en IntelTracker → APTTrail →

FIN8 is a financially motivated threat group that has been active since at least January 2016, and known for targeting organizations in the hospitality, retail, entertainment, insurance, technology, chemical, and financial sectors. In June 2021, security researchers detected FIN8 switching from targeting point-of-sale (POS) devices to distributing a number of ransomware variants.

Aliases del actor

Syssphinx Powersniff PUNCHBUGGY ShellTea lo que refleja su enfoque en ataques basados en macros

Actores similares

eloquent-pandaactor · 1 Masquerade File Typeactor · 1 Conquerors Electronic Armyapt · 0 Eloquent Pandaapt · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Web	unknown	attack.mitre.org	OSINT

Motivacion

Financial crime

Malware asociado

PUNCHTRACK

Tecnicas MITRE

T1074.002, T1588.003, T1078, T1573, T1588.002, T1018

CVEs relacionadas

CVE-2023-3519, CVE-2022-3236, CVE-2022-30190, CVE-2022-26134, CVE-2018-0798

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

Canada

Italy

Panama

United States

South Africa

Sectores atacados

Retail (1)

Sectores objetivo (OSINT)

Agriculture&ForestryRetailFinanceHealthCare & Social AssistanceInformation ServicesArts & EntertainmentFood ManufacturingInsuranceAccommodationRestaurants