FIN11, a financial crime gang, is shifting its tactics from phishing and credential-theft to ransomware, researchers said. FIN11 is a subset of the larger TA505 group (a.k.a.0065), which has been actively targeting various industries, including finance, retail and restaurants, since at least 2014. The group’s use of Clop and double extortion is only the latest change in its tactics and tools, Mandiant researchers said on Tuesday. It s known for using a wide range of tactics (in March, IBM X-Force observed COVID-19 themed phishing emails)
Source: https://threatpost.com/fin11-gang-double-extortion-ransomware/160089/