{
  "id": "fin10",
  "name": "FIN10",
  "aliases": [],
  "domain": "cyber",
  "country": "UNK",
  "category": "Cybercriminal group",
  "status": "tracked",
  "fielded": null,
  "operators": [],
  "summary": "FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Financially motivated group",
      "src": [
        "mitre-g0051"
      ],
      "conf": "medium"
    },
    {
      "k": "active_since",
      "v": 2013,
      "src": [
        "mitre-g0051"
      ],
      "conf": "medium",
      "note": "At least 2013"
    },
    {
      "k": "attack_id",
      "v": "G0051",
      "src": [
        "mitre-g0051"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016.",
      "src": [
        "mitre-g0051"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 11,
      "src": [
        "mitre-g0051"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "Empire",
      "src": [
        "mitre-g0051"
      ],
      "conf": "high",
      "note": "1 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "FIN10 is a financially motivated threat group that has targeted organizations in North America since at least 2013 through 2016. The group uses stolen data exfiltrated from victims to extort organizations. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0051)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/fin10.html",
  "sources": {
    "mitre-g0051": {
      "title": "FIN10, Group G0051",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0051/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}