Home / Threat actors / FIN10
FIN10 G0051
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
20
Techniques
1
Malware and tools
FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Initial Access
T1078 Valid AccountsT1078.003 Local Accounts Execution
T1053.005 Scheduled TaskT1059.001 PowerShellT1059.003 Windows Command Shell Persistence
T1053.005 Scheduled TaskT1078 Valid AccountsT1078.003 Local AccountsT1547.001 Registry Run Keys / Startup Folder Privilege Escalation
T1053.005 Scheduled TaskT1078 Valid AccountsT1078.003 Local AccountsT1547.001 Registry Run Keys / Startup Folder Stealth
T1070.004 File DeletionT1078 Valid AccountsT1078.003 Local Accounts Discovery
T1033 System Owner/User Discovery Lateral Movement
T1021.001 Remote Desktop ProtocolT1570 Lateral Tool Transfer Malware and tools
- EmpireToolS0363
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.