FINTEAM
Aliases: TeamBot
- First seen
- 2022-09-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-21 17:16:00
- Profile updated
- 2026-07-07 15:01:26
Targeted industries: financial-services government-and-public-sector
Targeted regions: country_code:de country_code:fr country_code:it country_code:es
Context
Recently, Check Point researchers spotted a targeted attack against officials within government finance authorities and representatives in several embassies in Europe. The attack, which starts with a malicious attachment disguised as a top secret US document, weaponizes TeamViewer, the popular remote access and desktop sharing software, to gain full control of the infected computer. This is achieved by sideloading another DLL among the legit TeamViewer.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Finteam (report)
- research.checkpoint.com — Finteam Trojanized Teamviewer Against Government Targets (report)