FIN7 | Detection.FYI

Potential APT FIN7 Exploitation Activity

Mar 16, 2025 · attack.execution attack.t1059.001 attack.t1059.003 detection.emerging-threats ·
Share on:

Detects potential APT FIN7 exploitation activity as reported by Google. In order to obtain initial access, FIN7 used compromised Remote Desktop Protocol (RDP) credentials to login to a target server and initiate specific Windows process chains.

Read More