MiniDuke
-
First known sample
2008 -
Discovery
2013 -
Number of targets
100-1000 -
Current status
Active -
Type
Backdoor -
Targeted platforms
Windows -
TOP targeted countries
Belgium , Hungary , Ireland , Portugal , Romania , The Czech Republic , Ukraine , United Arab Emirates -
Connected attacks
MINIDUKE
More about the Miniduke group, its tactics, techniques, procedures and tools
-
The way of propagation
Social engineering -
Purpose/Functions
Cyberespionage -
Special features
The malicious downloader is unique to each system and contains a customized backdoor written in Assembler.
-
Targets
Academia/Research , Government entities , Military , Telecoms -
Artefacts/Attribution
Russian-speaking authors
-
Description
An APT actor that uses a customized backdoor to carry out cyberespionage activities. The malware is spread using extremely effective social engineering attacks, which involve sending malicious PDF documents to their targets. They also make use of IE and Java vulnerabilities. There are 59 known victims across 23 countries.