FIN8: BADHATCH Threat Indicator Enrichment

INTRODUCTION

FIN8 research identifies ongoing campaigns against entities in Germany, Sweden and the US.

Last week (10 March 2021), Bitdefender released a whitepaper on the recent activities of the FIN8 threat actor group, focusing particularly on their BADHATCH toolkit[1]. The research found that FIN8, a financially motivated group, had used this toolkit to target victims in the chemicals, insurance, retail and technology sectors. We’ve expanded on Bitdefender’s findings by using Pure Signal™ Recon to identify infrastructure currently in use by the group.

METHODOLOGY

and w…