BackdoorDiplomacy

Threat Actors · BackdoorDiplomacy

· ATT&CK GroupG0135

Techniques

Software

Tactics

Aliases

Description

BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.(Citation: ESET BackdoorDiplomacy Jun 2021)

Tactic Coverage

stealth (5)discovery (3)command and control (2)resource development (2)privilege escalation (1)collection (1)initial access (1)persistence (1)execution (1)

Techniques Used (15)

T1027Obfuscated Files or Information

stealth

T1036.004Masquerade Task or Service

stealth

T1036.005Match Legitimate Resource Name or Location

stealth

T1046Network Service Discovery

discovery

T1049System Network Connections Discovery

discovery

Registration Required

Create a free account to access full Threat Actor Techniques

Showing 5 of 15 results

✓ Personal dashboard✓ Track 1 vendor/product✓ 1 keyword alert✓ Weekly digest✓ 1 CSV export/month

Already have an account? Sign in →

Software Used (5)

S0020China Choppermalware S0002Mimikatztool S0590NBTscantool S0262QuasarRATtool S0647Turianmalware

References (2)

https://attack.mitre.org/groups/G0135 https://www.welivesecurity.com/2021/06/10/backdoordiplomacy-upgrading-quarian-turian/