Threat actor · all actors
FIN6G0037 unknown
aka FIN6, Magecart Group 6, ITG08, Skeleton Spider, TAAL, Camouflage Tempest, White Giant, GOLD FRANKLIN, ATK88, G0037, TA4557, Storm-0538
Last updated: 2026-07-03
0attributed CVEs
58ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[FIN6](https://attack.mitre.org/groups/G0037) is a cyber crime group that has stolen payment card data and sold it for profit on underground marketplaces. This group has aggressively targeted and compromised point of sale (PoS) systems in the hospitality and retail sectors.(Citation: FireEye FIN6 April 2016)(Citation: FireEye FIN6 Apr 2019)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
T1003T1003.001T1003.003T1005T1018T1021T1021.001T1027T1027.010T1036T1036.004T1046T1047T1048T1048.003T1053T1053.005T1059T1059.001T1059.003T1059.007T1068T1070T1070.004T1074T1074.002T1078T1087T1087.002T1095T1102T1110T1110.002T1119T1134T1204T1204.002T1213T1213.006T1547T1547.001T1553T1553.002T1555T1555.003T1560T1560.003T1566T1566.001T1566.003T1569T1569.002T1572T1573T1573.002T1588T1588.002T1685
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 44 / 58 | 76% |
CM-6 | 41 / 58 | 71% |
CM-2 | 37 / 58 | 64% |
SI-3 | 31 / 58 | 53% |
AC-3 | 30 / 58 | 52% |
CM-7 | 30 / 58 | 52% |
AC-2 | 29 / 58 | 50% |
AC-6 | 29 / 58 | 50% |
CA-7 | 29 / 58 | 50% |
AC-5 | 19 / 58 | 33% |
SI-7 | 19 / 58 | 33% |
AC-4 | 18 / 58 | 31% |
IA-2 | 18 / 58 | 31% |
CM-5 | 17 / 58 | 29% |
SC-7 | 17 / 58 | 29% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- FIN8 0.41
- Silence 0.40
- Wizard Spider 0.36
- menuPass 0.35
- APT39 0.33