Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 14:59:39 UTC
Home > List all groups > List all tools > List all groups using tool SPINOFF
 Tool: SPINOFF
Names SPINOFF
Category Malware
Type Info stealer
Description
(Mandiant) SPINOFF can execute arbitrary SQL queries on specified databases and download
the results to a file. Like CLOSEWATCH, this malware was prevalent in early investigations.
Information <https://www.mandiant.com/resources/fin13-cybercriminal-mexico>
Last change to this tool card: 26 December 2021
Download this tool card in JSON format
All groups using tool SPINOFF
Changed Name Country Observed
APT groups
  FIN13 [Unknown] 2016  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c9a79a81-3397-4ebf-9fca-d5d5fbc81f7a
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c9a79a81-3397-4ebf-9fca-d5d5fbc81f7a
Page 1 of 1