FIN12

You need to know your enemies.

The FIN12 hacker group (alternative names Rapid RYUK Ransomware Attack, DDoff88 were used), mentioned in the report by Microsot and the Mandiant cybersecurity group, is a division of the Scientific and Technical Intelligence Directorate of the Russian Foreign Intelligence Service. which in its activities uses the forces and means of the structures of the federal state budgetary educational institution of higher professional education “Moscow State Technical University named after N.E. Bauman (National Research University), namely the Military Institute (VI) (64th separate center of the special service (military unit 45055, Moscow) — the so-called Center for Foreign Military Information and Communication) and the Military Training Center (161st training center (military unit 29155, 105077, Moscow, 11th Parkovaya st., 38a))

According to Mandiant, one in five FIN12 victims were medical groups, many of which ran hospitals, while other victims included groups in business services, education, finance, government, manufacturing, retail, and technology.