UN

FIN4

Medium ConfidenceMedium Threat

Wolf Spider

FIN4 is a financially motivated threat actor that has been active since at least 2013, uniquely focused on stealing insider information for stock market manipulation. The group targets publicly traded healthcare, pharmaceutical, and financial companies, seeking access to non-public information about mergers, acquisitions, and clinical trial results. FIN4's operations represent a sophisticated form of cyber-enabled securities fraud.

Origin: Unknown
Sponsor: Cybercriminal (No State Sponsor)
Active: 2013 - Present
Victims: 100+ organizations
Advanced
Active
Financial GainInsider Trading
Risk Assessment
53
Composite Risk Score
Medium Risk
ARCS Compliance60
Escalation Risk55
Grievance Index50
Infrastructure Impact45
History & Evolution

FIN4 is a financially motivated threat actor that has been active since at least 2013, uniquely focused on stealing insider information for stock market manipulation. The group targets publicly traded healthcare, pharmaceutical, and financial companies, seeking access to non-public information about mergers, acquisitions, and clinical trial results. FIN4's operations represent a sophisticated form of cyber-enabled securities fraud.

Targeting

Target Sectors

HealthcarePharmaceuticalFinancial ServicesLegal

Target Regions

United States
Attribution & Affiliations

Attributed to Cybercriminal (No State Sponsor) (Unknown). Attribution confidence: Medium.

Intelligence Assessment
Medium
Threat Level
Moderately
Targeting
Moderately
Adaptability
Medium
Persistence
Periodic
Op Tempo
Inactive
Status

Future Outlook

FIN4 is expected to continue operations targeting Healthcare sectors.

Timeline of Key Events
2013
Major

First observed activity of FIN4

2024
Moderate

Continued active operations