FIN8

FIN8 is a financially motivated threat group associated with the alias Syssphinx. Active since at least January 2016, FIN8 has targeted organizations across multiple sectors including hospitality, retail, entertainment, insurance, technology, chemical, and financial industries. In June 2021, the group shifted its focus from targeting point-of-sale devices to distributing ransomware variants.