MiniBus

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[MiniBus](https://attack.mitre.org/software/S9060) is a custom backdoor used for command execution, data discovery, gathering, and exfiltration. [MiniBus](https://attack.mitre.org/software/S9060) has utilized Azure Cloud Infrastructure and unique adversary-controlled domains for command and control. [MiniBus](https://attack.mitre.org/software/S9060) is an updated platform to its predecessor [MiniBike](https://attack.mitre.org/software/S9059) and was first observed in August 2023. [MiniBus](https://attack.mitre.org/software/S9060) has been affiliated with the cyber espionage threat group [NIMBUS MANTICORE](https://attack.mitre.org/groups/G1059).(Citation: Mandiant_UNC1549_Feb2024)

Associated Techniques (8)
ID ATT&CK Tactics
T1057 Process Discovery -
T1071.001 Web Protocols -
T1105 Ingress Tool Transfer -
T1497.001 System Checks -
T1518.001 Security Software Discovery -
T1547.001 Registry Run Keys / Startup Folder -
T1574.001 DLL -
T1673 Virtual Machine Discovery -
Used by Actors (1)
Metadata
ID: 439992
Created: 14/10/2026 04:00
Updated: 14/10/2026 16:00