APT Explorer

All actors

FIN5

Reports
5
Last reported
Known CVEs
1
Techniques in ATT&CK
11
ID
G0053
Sources
ATT&CKMISPETDAMalpedia
Merge evidence
5 alias matches

Reports per quarter

Dated reports, 2015 Q4 to 2026 Q2.

Techniques in ATT&CK

Listed by ATT&CK

No report from the last two years names a technique ID.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Prolific Cybercrime Gang Favors Legit Login Credentials

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. Analytics

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  3. Operation-Taskmasters-2019-eng

    date in the CCS '25 data Positive Technologies ORKLCCS '25 data

    The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Details

  4. Prolific Cybercrime Gang Favors Legit Login Credentials

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Prolific Cybercrime Gang Favors Legit Login Credentials

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

Newest first. Details opens the report in Explore.