Validin will be at Black Hat 2026, Booth #6200 — schedule time to meet with us for an enterprise demo or an online meeting
Docs
LOGIN REGISTER

FIN6

Aliases: Magecart Group 6, ITG08, Skeleton Spider, TAAL, Camouflage Tempest, Magentocore • FIN6 is a cybercriminal group known for stealing payment card data from PoS systems. They primarily target the hospitality and retail industries for financial gain.
Profile
Malicious
Category
Threat Actor Group
Threat Type
Unknown
Country
fin6
Profile Key
The profile key is a unique identifier for this threat actor. It can be used to query the Validin APIs as the threat_key for information about this threat actor.
Last Updated
At a Glance
Indicator Breakdown
Summary
Indicator Activity
Loading activity...
No indicators recorded yet.
Description

FIN6 is a cybercrime group that steals payment card data and sells it for profit on underground marketplaces. They aggressively target and compromise point-of-sale (PoS) systems in the hospitality and retail sectors.

Aliases (6)
Magecart Group 6
Alias
ITG08
Alias
Skeleton Spider
Alias
TAAL
Alias
Camouflage Tempest
Alias
Magentocore
Alias
Targets (3)
Hospitality
Target
Retail
Target
PoS systems
Target
External Sources