CDS2018-Technical-S5-ATT&CKing FIN7_The Value of Using Frameworks for Threat Intelligence-FINAL_clean

This presentation analyzes FIN7 — a financially motivated cybercriminal group active since 2015 — mapping their spearphishing-driven campaigns and multiple malware families (e.g., HALFBAKED, BELLHOP, POWERSOURCE, PILLOWMINT) to the MITRE ATT&CK framework; it details delivery, persistence, lateral movement, POS data exfiltration techniques, observable artifacts (registry keys, filenames, services), and detection/mitigation recommendations for defenders.