Blurred Lines: Sophisticated Hacks Building On Commodity Crime Tools

FireEye research reveals FIN6, a financially motivated cyber-crime group that used commodity malware (GRABNEW) and purchased/stolen credentials from underground markets to gain footholds, move laterally, and exfiltrate millions of payment card numbers from point-of-sale systems; the report emphasizes how commodity tools and criminal infrastructure enable both large-scale financial crime and more sophisticated, long-lived intrusions.