FIN8
FIN8 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 11 sectors, including Technology and Manufacturing, in 8 countries, including the United States and Germany. It uses 48 MITRE ATT&CK techniques and exploits 8 known CVEs.
- Syssphinx
- ATK113
- G0061
- Storm-0288
- Techniques
- 48
- Exploited CVEs
- 8
- First seen
- Jan 1, 2016
- Last seen
- Jul 18, 2023
- Record updated
Who They Target.
About FIN8.
FIN8 is a financially motivated threat group that has been active since at least January 2016, and known for targeting organizations in the hospitality, retail, entertainment, insurance, technology, chemical, and financial sectors. In June 2021, security researchers detected FIN8 switching from targeting point-of-sale (POS) devices to distributing a number of ransomware variants.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.