FinFisher

FinFisher, also known as FinSpy,[1] is surveillance software marketed by Lench IT Solutions plc, which markets the spyware through law enforcement channels.[1]

FinFisher can be covertly installed on targets' computers by exploiting security lapses in the update procedures of non-suspect software.[2][3][4] The company has been criticized by human rights organizations for selling these capabilities to repressive or non-democratic states known for monitoring and imprisoning political dissidents.[5] Egyptian dissidents who ransacked the offices of Egypt's secret police following the overthrow of Egyptian President Hosni Mubarak reported that they had discovered a contract with Gamma International for €287,000 for a license to run the FinFisher software.[6] In 2014, an American citizen sued the Ethiopian government for surreptitiously installing FinSpy onto his computer in America and using it to wiretap his private Skype calls and monitor his entire family's every use of the computer for a period of months.[7][8]

Lench IT Solutions plc has a UK-based branch, Gamma International Ltd in Andover, England, and a Germany-based branch, Gamma International GmbH in Munich.[9][10] Gamma International is a subsidiary of the Gamma Group, specializing in surveillance and monitoring, including equipment, software, and training services.[9] It was reportedly owned by William Louthean Nelson through a shell corporation in the British Virgin Islands.[11] The shell corporation was signed by a nominee director in order to withhold the identity of the ultimate beneficiary, which was Nelson, a common system for companies that are established offshore.[12]

On August 6, 2014, FinFisher source code, pricing, support history, and other related data were leaked after the Gamma International internal network was hacked by Phineas Fisher.[13]

The FinFisher GmbH opened insolvency proceedings at the Munich Local Court on 02.12.2021,[14] however this is only a restructuring and the company is to continue as Vilicius Holding GmbH.[15]

## Contents

* 1 Elements of the FinFisher suite
* 2 Method of infection
* 3 Use by repressive regimes
* 4 Reporters Without Borders
* 5 Firefox masquerading
* 6 Detection
* 7 See also
* 8 References
* 9 External links

## Elements of the FinFisher suite

In addition to spyware, the FinFisher suite offered by Gamma to the intelligence community includes monitoring of ongoing developments and updating of solutions and techniques which complement those developed by intelligence agencies.[16] The software suite, which the company calls "Remote Monitoring and Deployment Solutions", has the ability to take control of target computers and to capture even encrypted data and communications. Using "enhanced remote deployment methods" it can install software on target computers.[17] An "IT Intrusion Training Program" is offered which includes training in methods and techniques and in the use of the company-supplied software.[18]

The suite is marketed in Arabic, English, German, French, Portuguese, and Russian and offered worldwide at trade shows offering an intelligence support system, ISS, training, and products to law enforcement and intelligence agencies.[19]

## Method of infection

FinFisher malware is installed in various ways, including fake software updates, emails with fake attachments, and security flaws in popular software. Sometimes the surveillance suite is installed after the target accepts installation of a fake update to commonly used software.[2] Code which will install the malware has also been detected in emails.[20] The software, which is designed to evade detection by antivirus software, has versions which work on mobile phones of all major brands.[1]

A security flaw in Apple's iTunes allowed unauthorized third parties to use iTunes online update procedures to install unauthorized programs.[3][4] Gamma International offered presentations to government security officials at security software trade shows where they described how to covertly install the FinFisher spy software on suspects' computers using iTunes' update procedures.

The security flaw in iTunes that FinFisher is reported to have exploited was first described in 2008 by security software commentator Brian Krebs.[3][4][21] Apple did not patch the security flaw for more than three years, until November 2011. Apple officials have not offered an explanation as to why the flaw took so long to patch. Promotional videos used by the firm at trade shows which illustrate how to infect a computer with the surveillance suite were released by WikiLeaks in December 2011.[10]

In 2014, the Ethiopian government was found to have installed FinSpy on the computer of an American citizen via a fake email attachment that appeared to be a Microsoft Word document.[7]

Technical analysis of the malware, methods of infection and its persistence techniques has been published in Code And Security blog in four parts.[22]

## Use by repressive regimes

* FinFisher's wide use by governments facing political resistance was reported in March 2011 after Egyptian protesters raided State Security Investigations Service and found letters from Gamma International UK Ltd., confirming that SSI had been using a trial version for five months.[23]
* A similar report in August 2012 concerned e-mails received by Bahraini activists and passed on (via a Bloomberg News reporter) to University of Toronto computer researchers Bill Marczak and Morgan Marquis-Boire in May 2012. Analysis of the e-mails revealed code (FinSpy) designed to install spyware on the recipient's computer.[1][20] A spokesman for Gamma claims no software was sold to Bahrain and that the software detected by the researchers was not a legitimate copy but perhaps a stolen, reverse-engineered or modified demonstration copy.[24] In August 2014 Bahrain Watch claimed that the leak of FinFisher data contained evidence suggesting that the Bahraini government was using the software to spy on opposition figures, highlighting communications between Gamma International support staff and a customer in Bahrain, and identifying a number of human rights lawyers, politicians, activists and journalists who had apparently been targeted.[25]
* According to a document dated 7 December 2012 from the Federal Ministry of the Interior to members of the Finance Committee of the German Parliament, the German "Bundesnachrichtendienst", the Federal Surveillance Agency, have licensed FinFisher/FinSpy, even though its legality in Germany is uncertain.[26]
* In 2014, an America citizen sued the Ethiopian government for installing and using FinSpy to record a vast array of activities conducted by users of the machine, all whilst in America. Traces of the spyware inadvertently left on his computer show that information – including recordings of dozens of Skype phone calls – was surreptitiously sent to a secret control server located in Ethiopia and controlled by the Ethiopian government. FinSpy was downloaded on the plaintiff's computer when he opened an email with a Microsoft Word document attached. The attachment contained hidden malware that infected his computer.[7] In March 2017, the United States Court of Appeals for the District of Columbia Circuit found that the Ethiopian government's conduct was protected from liability by the Foreign Sovereign Immunities Act.[27][28]
* In 2015, FinFisher was reported to have been in use since 2012 for the 'Fungua Macho' surveillance programme of Uganda's President Museveni, spying upon the Ugandan opposition party, the Forum for Democratic Change.[29]

* In 2015 it is reported that FinFisher executives sold, illegally, the system to Turkey to enable their security services to spy on government opposition parties. Four former executives were charged in 2023 in Munich with failure to apply for an export licence for the $5.4 million contract.[30]

## Reporters Without Borders

On 12 March 2013 Reporters Without Borders named Gamma International as one of five "Corporate Enemies of the Internet" and “digital era mercenaries” for selling products that have been or are being used by governments to violate human rights and freedom of information. FinFisher technology was used in Bahrain and Reporters Without Borders, together with Privacy International, the European Center for Constitutional and Human Rights (ECCHR), the Bahrain Centre for Human Rights, and Bahrain Watch filed an Organisation for Economic Co-operation and Development (OECD) complaint, asking the National Contact Point in the United Kingdom to further investigate Gamma's possible involvement in Bahrain. Since then research has shown that FinFisher technology was used in Australia, Austria, Bahrain, Bangladesh, Britain, Brunei, Bulgaria, Canada, the Czech Republic, Estonia, Ethiopia, Germany, Hungary, India, Indonesia, Japan, Latvia, Lithuania, North Macedonia, Malaysia, Mexico, Mongolia, Netherlands, Nigeria, Pakistan, Panama, Qatar, Romania, Serbia, Singapore, South Africa, Turkey, Turkmenistan, the United Arab Emirates, the United States, Venezuela and Vietnam.[9][10][31][32][33]

## Firefox masquerading

FinFisher is capable of masquerading as other more legitimate programs, such as Mozilla Firefox. On April 30, 2013, Mozilla announced that they had sent Gamma a cease-and-desist letter for trademark infringement.[34] Gamma had created an espionage program that was entitled firefox.exe and even provided a version number and trademark to appear to be legitimate Firefox software.[35]

## Detection

In an article of PC Magazine, Bill Marczak (member of Bahrain Watch and computer science PhD student at University of California, Berkeley doing research into FinFisher) said of FinSpy Mobile (Gamma's mobile spyware): "As we saw with respect to the desktop version of FinFisher, antivirus alone isn't enough, as it bypassed antivirus scans".[36] The article's author Sara Yin, an analyst at PC Magazine, predicted that antivirus providers are likely to have updated their signatures to detect FinSpy Mobile.[36]

According to announcements from ESET, FinFisher and FinSpy are detected by ESET antivirus software as "Win32/Belesak.D" trojan.[37][38]

Other security vendors claim that their products will block any spyware they know about and can detect (regardless of who may have launched it), and Eugene Kaspersky, head of IT security company Kaspersky Lab, stated, "We detect all malware regardless its purpose and origin".[39] Two years after that statement by Eugene Kaspersky in 2012 a description of the technique used by FinFisher to evade Kaspersky protection was published in Part 2 of the relevant blog at Code And Security.

FinFisher has also made headlines in the past because its products were found to be used by authoritarian regimes against opponents in several Middle Eastern countries.[40]

## See also

* Computer and Internet Protocol Address Verifier (CIPAV)
* Duqu
* Flame (malware)
* Hacking Team
* Mahdi (malware)
* MiniPanzer and MegaPanzer
* NSA ANT catalog
* R2D2 (trojan)
* Stuxnet
* Tailored Access Operations

## References

1. ↑ 1.0 1.1 1.2 1.3 Nicole Perlroth (August 30, 2012). "Software Meant to Fight Crime Is Used to Spy on Dissidents". The New York Times. https://www.nytimes.com/2012/08/31/technology/finspy-software-is-tracking-political-dissidents.html.
2. ↑ 2.0 2.1 Jennifer Valentino-Devries (2011-11-21). "Surveillance Company Says It Sent Fake iTunes, Flash Updates". The Wall Street Journal. https://blogs.wsj.com/digits/2011/11/21/surveillance-company-says-it-sent-fake-itunes-flash-updates-documents-show/. "Perhaps the most extensive marketing materials came from Gamma’s FinFisher brand, which says it works by “sending fake software updates for popular software,” from Apple, Adobe and others. The FinFisher documentation included brochures in several languages, as well as videos touting the tools."
3. ↑ 3.0 3.1 3.2 Christopher Williams (2011-11-24). "Apple iTunes flaw 'allowed government spying for 3 years'". The Daily Telegraph. https://www.telegraph.co.uk/technology/apple/8912714/Apple-iTunes-flaw-allowed-government-spying-for-3-years.html. "A British company called Gamma International marketed hacking software to governments that exploited the vulnerability via a bogus update to iTunes, Apple's media player, which is installed on more than 250 million machines worldwide."
4. ↑ 4.0 4.1 4.2 Marcel Rosenbach (2011-11-22). "Firm Sought to Install Spyware Via Faked iTunes Updates". Der Spiegel. http://www.spiegel.de/international/germany/0,1518,799259,00.html. "Apparently, at least according to a video promoting FinFisher, the software uses Apple's popular iTunes in order to load snooping software onto the computers of the intended suspects."
5. ↑ Marquis-Boire, Morgan (13 March 2013). "You Only Click Twice: FinFisher's Global Proliferation". University of Toronto Citizen Lab. https://citizenlab.org/2013/03/you-only-click-twice-finfishers-global-proliferation-2/.
6. ↑ John Leyden (2011-09-21). "UK firm denies supplying spyware to Mubarak's secret police: RATs nest found in Egyptian spook HQ". The Register. https://www.theregister.co.uk/2011/09/21/egypt_cyber_spy_controversy/. "Documents uncovered when the country's security service headquarters were ransacked during the Arab Spring uprising suggest that Egypt had purchased a package called FinFisher to spy on dissidents."
7. ↑ 7.0 7.1 7.2 Kopfstein, Janus (March 10, 2014). "Hackers Without Borders". The Washington Post. http://www.newyorker.com/tech/elements/hackers-without-borders.
8. ↑ "American Sues Ethiopian Government for Spyware Infection". Electronic Frontier Foundation. February 18, 2014. https://www.eff.org/press/releases/american-sues-ethiopian-government-spyware-infection.
9. ↑ 9.0 9.1 9.2 "Corporate Enemies: Gamma International" , The Enemies of the Internet, Special Edition: Surveillance, Reporters Without Borders, 12 March 2013.
10. ↑ 10.0 10.1 10.2 Vernon Silver (July 25, 2012). "Cyber Attacks on Activists Traced to FinFisher Spyware of Gamma". Bloomberg. https://www.bloomberg.com/news/2012-07-25/cyber-attacks-on-activists-traced-to-finfisher-spyware-of-gamma.html.
11. ↑ "Offshore company directors' links to military and intelligence revealed" (in en). 2012-11-28. http://www.theguardian.com/uk/2012/nov/28/offshore-company-directors-military-intelligence.
12. ↑ "The 2014 FinFisher Leaks were a precursor to both Vault 7 and Panama Papers" (in en-GB). http://wikileaksdecrypted.com/the-2014-finfisher-leaks-were-a-precursor-to-both-vault-7-and-panama-papers-finfishervault7-wikileaks/.
13. ↑ Andre Meister (August 6, 2014). "Gamma FinFisher hacked: 40 GB of internal documents and source code of government malware published". Netzpolitik.org. https://netzpolitik.org/2014/gamma-finfisher-hacked-40-gb-of-internal-documents-and-source-code-of-government-malware-published/.
14. ↑ "Unternehmensregister". https://www.unternehmensregister.de/ureg/result.html;jsessionid=D95A6C4A9848ED0BBC67C32D319CC527.web01-1?submitaction=showDocument&id=29317072. "Unternehmensregister". https://www.unternehmensregister.de/ureg/result.html;jsessionid=D95A6C4A9848ED0BBC67C32D319CC527.web01-1?submitaction=showDocument&id=29317072.
15. ↑ "Spyware Finfisher nach Namenswechsel bei neuer Holding Vilicius" (in de). 10 December 2021. https://www.heise.de/news/Spyware-Finfisher-nach-Namenswechsel-bei-neuer-Holding-Vilicius-6292281.html.
16. ↑ "Portfolio". FinFisher IT Intrusion. Gamma Group. http://www.finfisher.com/FinFisher/en/portfolio.php. "Gamma addresses ongoing developments in the IT Intrusion field with solutions to enhance the capabilities of our clients. Easy to use high-end solutions and techniques complement the intelligence community’s knowhow enabling it to address relevant Intrusion challenges on a tactical level." "FinFisher IT Intrusion :: Portfolio". http://www.finfisher.com/FinFisher/en/portfolio.php.
17. ↑ "Portfolio". FinFisher IT Intrusion. Gamma Group. http://www.finfisher.com/FinFisher/en/portfolio.php. "The Remote Monitoring and Deployment Solutions are used to access target Systems to give full access to stored information with the ability to take control of target systems' functions to the point of capturing encrypted data and communications. When used in combination with enhanced remote deployment methods, the Government Agencies will have the capability to remotely deploy software on target systems." "FinFisher IT Intrusion :: Portfolio". http://www.finfisher.com/FinFisher/en/portfolio.php.
18. ↑ "Portfolio". FinFisher IT Intrusion. Gamma Group. http://www.finfisher.com/FinFisher/en/portfolio.php. "The IT Intrusion Training Program includes courses on both, products supplied as well as practical IT Intrusion methods and techniques. This program transfers years of knowledge and experience to endusers, thus maximizing their capabilities in this field." "FinFisher IT Intrusion :: Portfolio". http://www.finfisher.com/FinFisher/en/portfolio.php.
19. ↑ "News". Gamma Group. http://www.finfisher.com/FinFisher/en/news.php. "FinFisher IT Intrusion :: News". http://www.finfisher.com/FinFisher/en/news.php.
20. ↑ 20.0 20.1 Nicole Perlroth (August 13, 2012). "Elusive FinSpy Spyware Pops Up in 10 Countries" (blog by reporter). The New York Times. http://bits.blogs.nytimes.com/2012/08/13/elusive-finspy-spyware-pops-up-in-10-countries/.
21. ↑ Brian Krebs (2011-11-23). "Apple Took 3+ Years to Fix FinFisher Trojan Hole". Krebs on Security. http://krebsonsecurity.com/2011/11/apple-took-3-years-to-fix-finfisher-trojan-hole/. "I first wrote about this vulnerability for The Washington Post in July 2008, after interviewing Argentinian security researcher Francisco Amato about “Evilgrade,” a devious new penetration testing tool he had developed."
22. ↑ Coding and Security (2014-09-19). "FinFisher Malware Analysis and Technical Write-up". Coding and Security. https://www.codeandsec.com/FinFisher-Malware-Analysis-Part-1. "Detailed analysis of all components of FinFisher malware"
23. ↑ "Restrictions on freedom of communication" (in ar). shorouknews.com. Sunrise Gateway. http://www.shorouknews.com/columns/view.aspx?cdate=23102012&id=c5b92fd7-d56e-484c-865b-f7856fde2a48.
24. ↑ Vernon Silver (July 27, 2012). "Gamma Says No Spyware Sold to Bahrain; May Be Stolen Copy". Bloomberg News. https://www.bloomberg.com/news/2012-07-27/gamma-says-no-spyware-sold-to-bahrain-may-be-stolen-copy.html.
25. ↑ Desmukh, Fahad (7 August 2014). "Bahrain Government Hacked Lawyers and Activists with UK Spyware". https://bahrainwatch.org/blog/2014/08/07/uk-spyware-used-to-hack-bahrain-lawyers-activists/.
26. ↑ Andre Meister (16 January 2013). "Secret Government Document Reveals: German Federal Police Plans To Use Gamma FinFisher Spyware". Netzpolitik.org. https://netzpolitik.org/2013/secret-government-document-reveals-german-federal-police-plans-to-use-gamma-finfisher-spyware/.
27. ↑ Note, Recent Case: D.C. Circuit Finds Ethiopia Immune in Hacking Suit, 131 Harv. L. Rev. 1179 (2018)
28. ↑ Doe v. Federal Democratic Republic of Ethiopia, 851 F.3d 7 (D.C. Cir. 2017).
29. ↑ Nick Hopkins; Jake Morris (15 October 2015). "UK firm's surveillance kit 'used to crush Uganda opposition'". BBC News Online. https://www.bbc.co.uk/news/uk-34529237.
30. ↑ "Germany charges four for selling spyware to Turkey". 22 May 2023. https://insiderpaper.com/germany-charges-four-for-selling-spyware-to-turkey/.
31. ↑ "FinFisher Mobile Spyware Tracking Political Activists" , Mathew J. Schwartz, Information Week, 31 August 2012
32. ↑ "Researchers Find 25 Countries Using Surveillance Software" , Nicole Perlroth, The New York Times, 15 March 2013
33. ↑ "For Their Eyes Only: The Commercialization of Digital Spying" , Morgan Marquis-Boire with Bill Marczak, Claudio Guarnieri, and John Scott-Railton, Citizen Lab and Canada Centre for Global Security Studies, Munk School of Global Affairs, University of Toronto, 1 May 2013
34. ↑ "Protecting our brand from a global spyware provider" , Mozilla Foundation, April 30, 2013
35. ↑ "June, Daniel, "Mozilla Fights Against Spyware Company and its Exploits"". May 2013. http://www.jdjournal.com/2013/05/01/mozilla-fights-against-spyware-company-and-its-exploits/.
36. ↑ 36.0 36.1 Sara Yin (August 30, 2012). "Lessons Learnt From FinFisher Mobile Spyware". PC Magazine. http://securitywatch.pcmag.com/none/302174-lessons-learnt-from-finfisher-mobile-spyware.
37. ↑ Cameron Camp (August 31, 2012). "FinSpy and FinFisher spy on you via your cellphone and PC, for good or evil?". WeLiveSecurity. https://www.welivesecurity.com/2012/08/30/finfisher-helps-people-spy-on-you-via-your-cellphone-for-good-or-evil/.
38. ↑ David Harley (August 31, 2012). "Finfisher and the Ethics of Detection". WeLiveSecurity. https://www.welivesecurity.com/2012/08/31/finfisher-and-the-ethics-of-detection/.
39. ↑ Mathew J. Schwartz (August 31, 2012). "FinFisher Mobile Spyware Tracking Political Activists". Information Week. http://www.informationweek.com/tech-center/mobile-security/finfisher-mobile-spyware-tracking-politi/240006620.
40. ↑ "German prosecutors investigate spyware maker FinFisher | DW | 05.09.2019". Dawn. September 5, 2019. https://www.dw.com/en/german-prosecutors-investigate-spyware-maker-finfisher/a-50293812.

## External links

* Official website

* v
* t
* e

Hacking in the 2010s

| <- 2000s | Timeline | 2020s ->

|
|

Major incidents|

| 2010|

* Operation Aurora
* Australian cyberattacks
* Operation ShadowNet
* Operation Payback

|

2011|

* DigiNotar
* DNSChanger
* HBGary Federal
* Operation AntiSec
* Operation Tunisia
* PlayStation
* RSA SecurID compromise

2012|

* LinkedIn hack
* Stratfor email leak
* Operation High Roller

2013|

* South Korea cyberattack
* Snapchat hack
* Cyberterrorism Attack of June 25
* 2013 Yahoo! data breach

2014|

* Anthem medical data breach
* Operation Tovar
* iCloud leaks of celebrity photos
* 2014 JPMorgan Chase data breach
* Sony Pictures hack
* Russian hacker password theft
* 2014 Yahoo! data breach

2015|

* Office of Personnel Management data breach
* Hacking Team
* Ashley Madison data breach
* VTech data breach
* Ukrainian Power Grid Cyberattack
* SWIFT banking hack

2016|

* Bangladesh Bank robbery
* Hollywood Presbyterian Medical Center ransomware incident
* Commission on Elections data breach
* Democratic National Committee cyber attacks
* Vietnam Airport Hacks
* DCCC cyber attacks
* Indian Bank data breaches
* Dyn cyberattack
* Russian interference in the 2016 U.S. elections

2017|

* 2017 Macron e-mail leaks
* WannaCry ransomware attack
* Westminster cyberattack
* Petya cyberattack
* 2017 cyberattacks on Ukraine
* Equifax data breach
* Deloitte breach
* Disqus breach

2018|

* Trustico
* Exactis
* Atlanta cyberattack

2019|

* Sri Lanka cyberattack
* Baltimore ransomware attack
* 2019 Bulgarian revenue agency hack
* Capital One data breach
* Zynga Breach

Groups|

| Hacktivism|

* Anonymous
* associated events
* CyberBerkut
* GNAA
* Goatse Security
* Lizard Squad
* LulzRaft
* LulzSec
* New World Hackers
* NullCrew
* OurMine
* PayPal 14
* RedHack
* TeaMp0isoN
* UGNazi

|

Advanced Persistent Threat|

* Bureau 121
* Carbanak (group)
* Charming Kitten
* Cozy Bear
* Elfin Team
* Equation Group
* Fancy Bear
* FreeMilk
* Guccifer 2.0
* Hacking Team
* Helix Kitten
* Iranian Cyber Army
* Lazarus Group (BlueNorOff) (AndAriel)
* NSO Group
* PLA Unit 61398
* PLA Unit 61486
* PLA Unit 78020
* PLATINUM
* Pranknet
* Red Apollo
* Rocket Kitten
* Syrian Electronic Army
* Tailored Access Operations
* The Shadow Brokers
* Yemen Cyber Army

Individuals|

* DkD[||
* George Hotz
* Guccifer
* Jeremy Hammond
* Junaid Hussain
* Kristoffer von Hassel
* Mustafa Al-Bassam
* MLT
* Ryan Ackroyd
* Sabu
* Topiary
* Track2
* The Jester
* weev

Major vulnerabilities
publicly disclosed|

* Evercookie (2010)
* iSeeYou (2013)
* Heartbleed (2014)
* Shellshock (2014)
* POODLE (2014)
* Rootpipe (2014)
* Row hammer (2014)
* JASBUG (2015)
* Stagefright (2015)
* DROWN (2016)
* Badlock (2016)
* Dirty COW (2016)
* Cloudbleed (2017)
* Broadcom Wi-Fi (2017)
* EternalBlue (2017)
* DoublePulsar (2017)
* Silent Bob is Silent (2017)
* KRACK (2017)
* ROCA vulnerability (2017)
* BlueBorne (2017)
* Meltdown (2018)
* Spectre (2018)
* EFAIL (2018)
* Speculative Store Bypass (2018)
* Lazy FP State Restore (2018)
* TLBleed (2018)
* SigSpoof (2018)
* Foreshadow (2018)
* Fallout (2019)
* RIDL (2019)
* ZombieLoad (2019)
* BlueKeep (2019)

Malware|

| 2010|

* Bad Rabbit
* Stuxnet

|

2011|

* Kelihos
* Stars
* Metulji botnet
* Duqu
* Alureon

2012|

* Mahdi
* Carna
* Flame
* FBI
* Shamoon
* Red October
* Dexter

2013|

* DarkSeoul
* CryptoLocker

2014|

* Careto
* DarkHotel
* Duqu 2.0
* Dyreza
* FinFisher
* Brambul
* Destover
* Gameover ZeuS
* Carbanak

2015|

* Dridex
* Rombertik
* TeslaCrypt
* Hidden Tear

2016|

* Hitler
* Petya (NotPetya)
* KeRanger
* Jigsaw
* Pegasus
* Mirai
* X-Agent

2017|

* LogicLocker
* BrickerBot
* WannaCry

2018|

* Kraken

2019|

* ElectricFish
* Grum
* Joanap
* MEMZ
* NetTraveler
* NSA ANT catalog
* R2D2
* Regin
* Tinba
* Titanium
* Vault 7
* X-Tunnel
* ZeroAccess

* v
* t
* e

Malware topics

Infectious malware|

* Comparison of computer viruses
* Computer virus
* Computer worm
* List of computer worms
* Timeline of computer viruses and worms

Concealment|

* Backdoor
* Clickjacking
* Man-in-the-browser
* Man-in-the-middle
* Man-in-the-mobile
* Rootkit
* Trojan horse
* Zombie computer

Malware for profit|

* Adware
* Botnet
* Crimeware
* Form grabbing
* Fraudulent dialer
* Malbot
* Keystroke logging
* Privacy-invasive software
* Ransomware
* Rogue security software
* Scareware
* Spyware
* Web threats

By operating system|

* Android malware
* Classic Mac OS viruses
* iOS malware
* Linux malware
* MacOS malware
* Macro virus
* Mobile malware
* Palm OS viruses

Protection|

* Anti-keylogger
* Antivirus software
* Browser security
* Data loss prevention software
* Defensive computing
* Firewall
* Internet security
* Intrusion detection system
* Mobile security
* Network security

Countermeasures|

* Computer and network surveillance
* Honeypot
* Bot Roast

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/FinFisher. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=FinFisher&oldid=4344242"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template