TT Malware Log

マルウェア / サイバー攻撃 / 解析技術 に関する「個人」の調査・研究・参照ログ

攻撃組織: Fin6 / ITG08

Nowhere to Hide: Intelligence Illuminating the Threat

【図表】 出典: https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/keynote-cds19-sandra-joyce.pdf 【概要】■使用ツール Fin6 - RmaRat, Ammyy, Meterpreter Fin7 - Beacon, PowerSource, Ammyy Fin9 - NetWire Fin10 - Empi…

More_eggs, Anyone? Threat Actor ITG08 Strikes Again

【ニュース】 ◆More_eggs, Anyone? Threat Actor ITG08 Strikes Again (SecurityIntelligence, 2019/10/29) https://securityintelligence.com/posts/more_eggs-anyone-threat-actor-itg08-strikes-again/ 【関連まとめ記事】◆全体まとめ ◆攻撃組織 / Actor …

Fin6 (まとめ)

概要 【別名】 攻撃組織名 命名組織 Fin6 一般 Skeleton Spider CrowdStrike ITG08 【辞書】 ◆FIN6 (ATT&CK) https://attack.mitre.org/groups/G0037/ ◆FIN6 (Malpedia) https://malpedia.caad.fkie.fraunhofer.de/actor/fin6 ◆FIN6 group https://otx.alien…

NEW GLOBAL CYBER ATTACK ON POINT OF SALE SYSTEMS

【ブログ】 ◆NEW GLOBAL CYBER ATTACK ON POINT OF SALE SYSTEMS (CyberSecurity Blog(Morphisec), 2019/02/27) http://blog.morphisec.com/new-global-attack-on-point-of-sale-systems 【インディケータ情報】 ◆Fin6 (IoC (TT Malware Log)) https://ioc.h…

Update: Let's Learn: Reversing FIN6 "GratefulPOS" aka "FrameworkPOS" Point-of-Sale Malware in-Depth

【ブログ】 ◆Update: Let's Learn: Reversing FIN6 "GratefulPOS" aka "FrameworkPOS" Point-of-Sale Malware in-Depth (Vitali Kremez, 2017/12/09) https://www.vkremez.com/2017/12/lets-learn-reversing-grateful-point-of.html

FOLLOW THE MONEY: DISSECTING THE OPERATIONS OF THE CYBER CRIME GROUP FIN6

【図表】 出典: https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf 【資料】 ◆FOLLOW THE MONEY: DISSECTING THE OPERATIONS OF THE CYBER CRIME GROUP FIN6 (Fireeye, 2016/04) https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf …


Copyright (C) 谷川哲司 (Tetsuji Tanigawa) 1997 - 2023