FireEye has uncovered a new hacking group dubbed FIN5 hacked payment systems of an un-named Casino and it has stolen nearly 150,000 credit cards. The hackers at FIN5 group hack organizations by using stolen credentials, then they target Active Directory to obtain more credentials and gain lateral movement. FireEye/Mandiant confirmed the payment platforms were not protected by network appliance, neither by strong authentication mechanisms. The group used a backdoor codenamed Tornhull and a VPN dubbed Flipside to maintain the control over the compromised system.”]
Source: https://securityaffairs.co/wordpress/41044/cyber-crime/fin5-hacked-a-casino.html