BACKSPACE

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[BACKSPACE](https://attack.mitre.org/software/S0031) is a backdoor used by [APT30](https://attack.mitre.org/groups/G0013) that dates back to at least 2005. (Citation: FireEye APT30)

Associated Techniques (14)
ID ATT&CK Tactics
T1012 Query Registry -
T1041 Exfiltration Over C2 Channel -
T1057 Process Discovery -
T1059.003 Windows Command Shell -
T1071.001 Web Protocols -
T1082 System Information Discovery -
T1083 File and Directory Discovery -
T1090.001 Internal Proxy -
T1104 Multi-Stage Channels -
T1112 Modify Registry -
T1132.002 Non-Standard Encoding -
T1547.001 Registry Run Keys / Startup Folder -
T1547.009 Shortcut Modification -
T1562.004 Disable or Modify System Firewall -
Aliases (105)
Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna Lecna
Used by Actors (1)
APT30
Nation-state
Metadata
ID: 680
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00