CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

FIN5

April 25, 2025

[FIN5](https://attack.mitre.org/groups/G0053) is a financially motivated threat group that has targeted personally identifiable information and payment card information. The group has been active since at least 2008 and has targeted the restaurant, gaming, and hotel industries. The group is made up of actors who likely speak Russian. (Citation: FireEye Respond Webinar July 2017) (Citation: Mandiant FIN5 GrrCON Oct 2016) (Citation: DarkReading FireEye FIN5 Oct 2015)

Aliases: FIN5

MITRE ATT&CK ID: G0053

View on MITRE ATT&CK