FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums
FIN7, a financially driven threat actor, has been seen advertising a tool known to be utilized by ransomware gangs like Black Basta on different underground forums under various pseudonyms.
The cybersecurity company SentinelOne said in a report provided with The Hacker News that "AvNeutralizer (aka AuKill), a highly specialized tool developed by FIN7 to tamper with security solutions, has been marketed in the criminal underground and used by multiple ransomware groups."
From its beginnings as an attacker of point-of-sale (PoS) terminals, to serving as a ransomware affiliate for now-defunct gangs like REvil and Conti, to the launch of its own ransomware-as-a-service (RaaS) programs DarkSide and BlackMatter, FIN7, an e-crime group of Russian and Ukrainian origin, has been a consistent...