MiniDuke

  • First known sample

    2008
  • Discovery

    2013
  • Number of targets

    100-1000
  • Current status

    Active
  • Type

    Backdoor
  • Targeted platforms

    Windows
  • TOP targeted countries

    Belgium , Hungary , Ireland , Portugal , Romania , The Czech Republic , Ukraine , United Arab Emirates
  • Connected attacks

  • The way of propagation

    Social engineering
  • Purpose/Functions

    Cyberespionage
  • Special features
    The malicious downloader is unique to each system and contains a customized backdoor written in Assembler.
  • Targets

    Academia/Research , Government entities , Military , Telecoms
  • Artefacts/Attribution
    Russian-speaking authors
  • Description

    An APT actor that uses a customized backdoor to carry out cyberespionage activities. The malware is spread using extremely effective social engineering attacks, which involve sending malicious PDF documents to their targets. They also make use of IE and Java vulnerabilities. There are 59 known victims across 23 countries.

    Additional information