White Paper
THREAT PROFILE: FIN7
FIN7 is a highly sophisticated cybercriminal group first identified in 2012 and widely attributed to Russia. Also known by names such as Carbanak, Carbon Spider, and Anunak, the group is known for financially motivated cyber operations targeting organizations across multiple industries worldwide. FIN7 employs a variety of attack methods, including social engineering, phishing campaigns, drive-by compromises, vulnerability exploitation, trusted relationship abuse, and supply chain attacks to gain access to victim environments. The threat profile examines the group’s operational history, known campaigns, counter-operations by law enforcement, exploited vulnerabilities, organizational structure, tools, malware, and affiliations with related threat actors and front companies. Mapped to the MIT
