Le groupe cybercriminel FIN7

ANSSI profiles FIN7 (a successor to Carbanak) as a highly organized, Russian‑language cybercriminal group that has stolen millions of payment-card records from POS systems and pivoted since 2020 into Big Game Hunting ransomware activity (Darkside, BlackMatter). The report documents FIN7’s corporate-like structure and shell companies used for recruiting, its phishing and BadUSB delivery methods, a broad malware/toolset (Carbanak, Harpy, Bateleur, Lizar, Boostwrite, Cobalt Strike, etc.), victim sectors and geographies, and examples of impact including ransomware incidents that disrupted critical services.