FIN13
FIN13 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 4 sectors, including Finance and Healthcare, in the United States and Mexico. It uses 66 MITRE ATT&CK techniques and exploits 8 known CVEs.
Also known as
- Elephant Beetle
- TG2003
- Techniques
- 66
- Exploited CVEs
- 8
- First seen
- Jan 1, 2016
- Last seen
- Aug 8, 2022
- Record updated
Who They Target.
Countries · 2
Labelsbdef-qf:latest
About FIN13.
FIN13 is a financially motivated cyber threat group that has targeted the financial, retail, and hospitality industries in Mexico and Latin America, as early as 2016. FIN13 achieves its objectives by stealing intellectual property, financial data, mergers and acquisition information, or PII.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.