FIN7 tried REvil in several attacks before deciding to develop its own ransomware.
Explicit Confidence 98% · Will EP 126 Details
“They had tried out REvil for a few times.”
Threat actor
threat_actor:fin7
Criminal group described as shifting from bank and credit-card theft toward ransomware and ransomware-as-a-service.
Criminal group described as shifting from bank and credit-card theft toward ransomware and ransomware-as-a-service.
“there was another group at the time called FIN7”
“FIN7 basically realized”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | REvil | Explicit | 126 |
| incoming | DEVELOPED_BY | DarkSide | Explicit | 126 |
FIN7 tried REvil in several attacks before deciding to develop its own ransomware.
Explicit Confidence 98% · Will EP 126 Details
“They had tried out REvil for a few times.”
Will identifies DarkSide as FIN7’s first ransomware project.
Explicit Confidence 97% · Will EP 126 Details
“DarkSide was FIN7’s first ransomware project.”