FLIPSIDE
MITRE ATT&CK: S0173 View on attack.mitre.org
Aliases: FLIPSIDE
- Malware type
- backdoor
- Family
- Malware family
- Operating systems
- windows
- Profile updated
- 2026-07-07 13:21:36
Targeted industries: financial-services retail-and-hospitality
Context
FLIPSIDE is a simple tool similar to Plink that is used by FIN5 to maintain access to victims.
Detection coverage
- 23 Sigma rules
Malware & tools used
- Protocol Tunneling (attack-pattern)
Used by threat actors
- FIN5 (threat-actor)
Reports & references
- youtube.com — Watch (report)
- MITRE ATT&CK — S0173 (report)