APT
ATLAS
Atlas
Actors
145
Names
507
Sectors
40
⌘K
▸
sign in
Atlas
Actors
145
Names
507
Sectors
40
LOADING
FIN4 · APT Atlas
Actors
/
Cybercrime
/
Unattributed
FIN4
G0085
CRIME
?? · Unattributed
CrowdStrike
:
WOLF SPIDER
MITRE
:
G0085
Targets
4
Sectors
0
Threat types
1
GIRs mapped
0/480
Active since
2013
Explore in atlas
Save actor
Share
Export
STIX 2.1
ATT&CK Navigator
Also tracked as
3 vendor names · 0 other aliases
Open Rosetta Stone
CrowdStrike
WOLF SPIDER
Mandiant
FIN4
MITRE
G0085
Victimology
Geographic footprint · 4 countries
Export STIX
origin · unattributed
targeted countries · 4
OCEANIA ·
1
Australia
AMERICAS ·
2
Chile
·
United States
EUROPE ·
1
Ireland
Sectors targeted
0 of 40
No sectors targeted yet for this actor.
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
FIN · Financial Fraud
MITRE ATT&CK · 8 techniques
Initial Access
· 2
T1566.001
Spearphishing Attachment
T1566.002
Spearphishing Link
Execution
· 2
T1059.005
Visual Basic
T1204.001
Malicious Link
Collection
· 1
T1114.002
Remote Email Collection
Command And Control
· 2
T1071.001
Web Protocols
Stealth
· 1
T1078
Valid Accounts
GIR mappings
0 / 480 requirements mapped
Open matrix
No GIRs mapped yet for this actor.
References
No supporting references have been recorded for this profile. Treat uncited claims as unverified.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
8 techniques · layer format 4.5
Related actors
By origin and actor type
AnonGhost
hacktivist
unattributed · 14 targets · since 2013
Anonymous Sudan
hacktivist
unattributed · 0 targets · since 2023
APT49
nation-state
unattributed · 0 targets · since —
APT73
nation-state
unattributed · 0 targets · since —
Bahamut
hacktivist
unattributed · 0 targets · since 2016
DEV-0537
cybercrime
unattributed · 7 targets · since 2021
T1090.003
Multi-hop Proxy