H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[FLIPSIDE](https://attack.mitre.org/software/S0173) is a simple tool similar to Plink that is used by [FIN5](https://attack.mitre.org/groups/G0053) to maintain access to victims. (Citation: Mandiant FIN5 GrrCON Oct 2016)

Labels

malware
2 recorded

Relationships

uses
from FIN5
Group
usesTechnique
3 external

References

mitre-attack
S0173
open
FLIPSIDE
—
Mandiant FIN5 GrrCON Oct 2016
https://www.youtube.com/watch?v=fevGZs0EQu8
open