FIN6
No sourced public emblem in this profile.
reference profile · reported nexus: Unknown (not nationality)
FIN is a group targeting financial assets including assets able to do financial transaction including PoS.
Source-reported aliases: SKELETON SPIDER, ITG08, MageCart Group 6, White Giant, GOLD FRANKLIN, ATK88, G0037, Camouflage Tempest, TA4557, Storm-0538, SQUID COMET. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf
https://www.fireeye.com/blog/threat-research/2019/04/pick-six-intercepting-a-fin6-intrusion.html
https://attack.mitre.org/groups/G0037/
https://securityintelligence.com/posts/more_eggs-anyone-threat-actor-itg08-strikes-again/
https://www.crowdstrike.com/resources/reports/2019-crowdstrike-global-threat-report/
https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/