FIN6 has traditionally conducted intrusions targeting payment card data from Point-of-Sale (POS) or eCommerce systems. Given that, FIN6 may have evolved as a whole to focus on these extortive intrusions. Which of those scenarios is happening would influence how pressing a threat the group’s card data breach tactics continue to be. Given that these intrusions have been sustained for almost a year, we expect that continued research into further intrusion attempts may enable us to more fully answer these questions regarding FIN6’s current status