The organization behind ATT&CK has released a companion framework specifically for financial fraud, introducing two new attack phases that the original framework never covered.