Aliases: Magecart Group 6, ITG08, Skeleton Spider, TAAL, Camouflage Tempest, Magentocore
•
FIN6 is a cybercriminal group known for stealing payment card data from PoS systems. They primarily target the hospitality and retail industries for financial gain.
Profile
Malicious
Category
Threat Actor Group
Threat Type
Unknown
Country
fin6
The profile key is a unique identifier for this threat actor. It can be used to query the Validin APIs as the
threat_key for information about this threat actor.
2026-09-16T14:05:15Z
Last Updated
Indicator Breakdown
Summary
Description
FIN6 is a cybercrime group that steals payment card data and sells it for profit on underground marketplaces. They aggressively target and compromise point-of-sale (PoS) systems in the hospitality and retail sectors.
Aliases (6)
Magecart Group 6
Alias
ITG08
Alias
Skeleton Spider
Alias
TAAL
Alias
Camouflage Tempest
Alias
Magentocore
Alias
Targets (3)
Hospitality
Target
Retail
Target
PoS systems
Target
External Sources
Maltrail