FinFisher

Malware updated 3 months ago (2024-06-07T22:17:31.710Z)
Download STIX
Preview STIX
FinFisher, also known as FinSpy, is a notorious malware developed by the European company FinFisher. This malicious software has been used extensively for cyber espionage, exploiting vulnerabilities in systems to infiltrate and surveil targets, often without their knowledge. The malware infects systems through suspicious downloads, emails, or websites, and once inside, it can steal personal information, disrupt operations, or hold data hostage. Companies like FinFisher and Hacking Team in Europe, along with NSO Group and Paragon in Israel, have emerged as significant players in this industry over the past 15 years. Their surveillance tools have been used to target hundreds of journalists and activists globally. Research conducted by Citizen Lab revealed that FinFisher spyware was being used by the Serbian BIA, and threat actors have used FinFisher to infect mobile phones and computers worldwide. In one notable incident, a Sydney Data Center was targeted by FinFisher spyware. The use of FinFisher has grown over time, supported by zero-day exploits, with attacks happening across multiple remote locations globally. Despite the global spread, there were indications that ISP-level FinFisher Man-in-The-Middle (MiTM) attacks could have occurred, though this remains speculative. In recent years, FinFisher faced increasing scrutiny and legal challenges. Amidst these pressures, Bloomberg reported in March 2022 that FinFisher had shut down operations and filed for bankruptcy. This followed accusations from civil rights organizations like Amnesty International, which claimed that FinFisher sold its FinSpy spyware to authoritarian governments worldwide. Despite its closure, the legacy of FinFisher continues to influence the landscape of cybersecurity and surveillance.
Description last updated: 2024-06-07T22:15:39.010Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Finspy
3
FinSpy is a sophisticated malware developed by Gamma Group, also known as FinFisher or Lench IT Solutions. This malicious software has the ability to record audio, turn on the device's camera, and exfiltrate data from smartphones without the owner's awareness. It is typically delivered through explo
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Spyware
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the FinFisher Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
BankInfoSecurity
3 months ago
Microsoft Now Promises Extra Security for AI-Driven Recall
BankInfoSecurity
3 months ago
Microsoft Tweaks Recall for Security
DARKReading
4 months ago
Amnesty International Cites Indonesia as a Spyware Hub
InfoSecurity-magazine
4 months ago
Indonesia is a Spyware Haven, Amnesty International Finds
CERT-EU
9 months ago
Spyware Targeting Against Serbian Civil Society - The Citizen Lab
CERT-EU
a year ago
Connect the Dots on State-Sponsored Cyber Incidents - Spyware linked to Indonesia found in proxy servers in Australia
MITRE
2 years ago
BlackOasis APT and new targeted attacks leveraging zero-day exploit
MITRE
2 years ago
Shedding Skin - Turla’s Fresh Faces | Securelist
CERT-EU
a year ago
Nationale Sicherheitsstrategie: Buzzwords statt Strategie – eine Analyse
BankInfoSecurity
a year ago
German Prosecutors Indict FinFisher Spyware Executives
MITRE
2 years ago
Middle Eastern hacking group is using FinFisher malware to conduct international espionage
MITRE
2 years ago
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe - Microsoft Security Blog
MITRE
2 years ago
APT Trends report Q1 2018
MITRE
2 years ago
FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY | Mandiant
CERT-EU
2 years ago
Data Centers Hacked - Login Details of Tech Giants Leaked on a Hacker Forum
InfoSecurity-magazine
a year ago
New Zero-Click iOS Exploit Deploys Israeli Spyware
CERT-EU
a year ago
Investigating the Digital Threat Landscape
CERT-EU
a year ago
PEGA committee calls for EU level regulation of spyware