French cybersecurity authorities have issued an alert regarding the cybercriminal group known as FIN 12, which has been involved in various ransomware attacks. This alert, marked as CERTFR-2023-IOC-001, provides details about the group’s tactics and indicators of compromise (IoC) associated with their operations.
Key Details:
- Group Name: FIN 12
- Type: Cybercriminal
- Activity: Multiple Ransomware Attacks
- Initial Version Date: September 18, 2023
- Latest Version Date: September 18, 2023
Indicators of Compromise:
The document includes technical indicators associated with FIN 12’s cybercriminal activities, as outlined in CERTFR-2023-CTI-007. These indicators can be utilized for the purpose of identifying compromises in historical logs or for detection purposes.
Download Indicators (JSON MISP)
Cybersecurity authorities advise organizations and individuals to remain vigilant and take necessary precautions to protect their systems and data from potential ransomware attacks orchestrated by groups like FIN 12.
For more detailed information and recommendations on safeguarding against such cyber threats, it is advisable to refer to the official CERT-FR (Computer Emergency Response Team France) website.