Financial Threat Groups

Financial threat groups (FIN) comprise of actors that target financial institutions. The following rules detect the presence of FIN groups based on publicly available information.

FIN4

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

Other names for this group include: Wolf Spider

FIN5

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

FIN6

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

Other names for this group include: ITG08 Skeleton Spider

FIN7

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

Other names for this group include: Anunak Carbon Spider

FIN8

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

FIN10

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.

FIN12

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.