Actors/Cybercrime/Europe

FIN5

G0053CRIMERU · Russia

AKA Sundown

CrowdStrike: GRACEFUL SPIDERMITRE: G0053

Targets4

Sectors0

Threat types1

GIRs mapped0/480

Active since2008

Explore in atlas

Also tracked as

3 vendor names · 1 other aliases

Open Rosetta Stone

CrowdStrike

GRACEFUL SPIDER

Mandiant

FIN5

MITRE

G0053

UNATTRIBUTED ALIASESSundown

Victimology

Geographic footprint · 4 countries

Export STIX

origin · Russiatargeted countries · 4

OCEANIA · 1

Australia

AMERICAS · 3

Bahamas · Canada · United States

Sectors targeted

0 of 40

No sectors targeted yet for this actor.

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

FIN · Financial Fraud

MITRE ATT&CK · 6 techniques

Execution · 1

T1059Command and Scripting Interpreter

Credential Access · 1

T1110Brute Force

Discovery · 1

T1018Remote System Discovery

Collection · 1

T1119Automated Collection

Stealth · 2

T1070.004File Deletion T1078Valid Accounts

GIR mappings

0 / 480 requirements mapped

Open matrix

No GIRs mapped yet for this actor.

References

No supporting references have been recorded for this profile. Treat uncited claims as unverified.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer6 techniques · layer format 4.5

Related actors

By origin and actor type