Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Elephant Beetle
53
techniques
4
software
11,458
corpus matches
profile
FIN13 is a financially motivated cyber threat group that has targeted the financial, retail, and hospitality industries in Mexico and Latin America, as early as 2016. FIN13 achieves its objectives by stealing intellectual property, financial data, mergers and acquisition information, or PII.
techniques
53 attributed · most-instrumented first
software
4 malware & tools attributed
Mimikatz
S0002
certutil
S0160
Impacket
S0357
Empire
S0363
read this carefully
11,458 corpus matches is not attribution
That count is indicators which exhibit techniques FIN13 is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+41 more techniques
showing 30 of 11,458
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.