Threat Landscape Dashboard

Assessing today's threats and the relationships between them

Operation ITG08 Strikes Again

The FIN6 threat group, also known as ITG08, sent targeted spear-phishing emails to employees that contained a malicious link to a supposed job offer. Once compromised, the attackers dropped the More_eggs JScript backdoor to download additional malware including Mimikatz to steal sensitive information.
Name Modified Date Sources
Operation ITG08 Strikes Again 2019-09-13