OnionDuke

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[OnionDuke](https://attack.mitre.org/software/S0052) is malware that was used by [APT29](https://attack.mitre.org/groups/G0016) from 2013 to 2015. (Citation: F-Secure The Dukes)

Associated Techniques (5)

ID	ATT&CK	Tactics
T1003	OS Credential Dumping	-
T1071.001	Web Protocols	-
T1102.003	One-Way Communication	-
T1140	Deobfuscate/Decode Files or Information	-
T1499	Endpoint Denial of Service	-

Used by Actors (1)

APT29
Nation-state

Metadata

ID:	494
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00