FIN5
FIN5 is a Russia-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 3 sectors, including Media and Entertainment, and Hospitality and Tourism, in the United States. It uses 12 MITRE ATT&CK techniques.
Also known as
- G0053
- Origin
- Russia
- Techniques
- 12
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2008
- Last seen
- Jul 20, 2017
- Record updated
Who They Target.
Countries · 1
Labelsinitial-access-broker
About FIN5.
FIN5 is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.