FinFisher

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[FinFisher](https://attack.mitre.org/software/S0182) is a government-grade commercial surveillance spyware reportedly sold exclusively to government agencies for use in targeted and lawful criminal investigations. It is heavily obfuscated and uses multiple anti-analysis techniques. It has other variants including [Wingbird](https://attack.mitre.org/software/S0176). (Citation: FinFisher Citation) (Citation: Microsoft SIR Vol 21) (Citation: FireEye FinSpy Sept 2017) (Citation: Securelist BlackOasis Oct 2017) (Citation: Microsoft FinFisher March 2018)

Associated Techniques (22)
ID ATT&CK Tactics
T1012 Query Registry -
T1027 Obfuscated Files or Information -
T1027.002 Software Packing -
T1027.016 Junk Code Insertion -
T1036.005 Match Legitimate Resource Name or Location -
T1055.001 Dynamic-link Library Injection -
T1056.004 Credential API Hooking -
T1057 Process Discovery -
T1070.001 Clear Windows Event Logs -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1113 Screen Capture -
T1134.001 Token Impersonation/Theft -
T1140 Deobfuscate/Decode Files or Information -
T1497.001 System Checks -
Aliases (105)
FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy FinSpy
Used by Actors (1)
Dark Caracal
Unknown
Metadata
ID: 467
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00