FIN11

Threat Actor

FIN11, a financially-motivated hacker group with a history starting since at least 2016, has adapted malicious email campaigns to transition to ransomware as the main monetization method, according to a Bleeping Computer report. The group runs high-volume operations, lately targeting companies primarily in North America and Europe from almost every industry sector to steal data and to deploy Clop ransomware.

Incidents Associated with this Threat

February 23, 2021: Jet Maker, Bombardier, Victim In Accellion Attack

Malware Used by this Threat Actor

No malware identified for this threat actor.