[TWOSTROKE](https://attack.mitre.org/software/S9067) is malicious backdoor written in C++ that is capable of discovery actions, executing payloads and exfiltrating data.(Citation: Mandiant_UNC1549_Nov2025) [TWOSTROKE](https://attack.mitre.org/software/S9067) was first observed in 2025 and has been affiliated with the cyber espionage threat group [NIMBUS MANTICORE](https://attack.mitre.org/groups/G1059).(Citation: Mandiant_UNC1549_Nov2025)