BackdoorDiplomacy

MISP
Tipo:
Unknown
Paese:
Unknown
Prima attivita:
Unknown
Dettagli:

An APT group that we are calling BackdoorDiplomacy, due to the main vertical of its victims, has been targeting Ministries of Foreign Affairs and telecommunication companies in Africa and the Middle East since at least 2017.

MITRE ATT&CK: View on MITRE
Tecniche Utilizzate (15)
ID ATT&CK Tattiche
T1027 Obfuscated Files or Information -
T1036.004 Masquerade Task or Service -
T1036.005 Match Legitimate Resource Name or Location -
T1046 Network Service Discovery -
T1049 System Network Connections Discovery -
T1055.001 Dynamic-link Library Injection -
T1074.001 Local Data Staging -
T1095 Non-Application Layer Protocol -
T1105 Ingress Tool Transfer -
T1120 Peripheral Device Discovery -
T1190 Exploit Public-Facing Application -
T1505.003 Web Shell -
T1574.001 DLL -
T1588.001 Malware -
T1588.002 Tool -
Riferimenti (1)
Alias (315)
BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian BackDip CloudComputating Quarian
Malware Utilizzato (5)
China Chopper
other
Mimikatz
tool
NBTscan
tool
QuasarRAT
tool
Turian
other
Metadata
ID: 336
Created: 13/01/2026 17:48
Updated: 07/03/2026 04:00