218
The group , dubbed FIN10 by FireEye researchers , first gets access to the target companies ’ systems through spear - phishing ( and possibly other means ) , then uses publicly available software , scripts and techniques to gain a foothold into victims ’ networks .
 ( phishing: spear - phishing,  gets access to the target companies ’ systems: purpose, FIN10: attacker, The group: attacker, gain a foothold into victims ’ networks: purpose) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: spear - phishing,  gets access to the target companies ’ systems: purpose, FIN10: attacker, The group: attacker, gain a foothold into victims ’ networks: purpose) 