Skip to content
CybercrimeFinancialModerate sophistication · Organisation

FIN6

FIN6 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Manufacturing, in 4 countries, including the United States and the United Kingdom. It uses 68 MITRE ATT&CK techniques and exploits 7 known CVEs.

Also known as
  • Magecart Group 6
  • ITG08
  • Skeleton Spider
  • TAAL
  • Camouflage Tempest
  • ATK88
  • G0037
  • GOLD FRANKLIN
  • White Giant
  • TAG-CR2
  • Storm-0538
Techniques
68
Exploited CVEs
7
First seen
Jan 1, 2015
Last seen
Nov 30, 2020
Record updated

Who They Target.

Labelsglobal

About FIN6.

FIN6 has been active since at least 2015. FIN6 is a cyber crime group that has stolen payment card data and sold it for profit on underground marketplaces.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.