MITRE ATT&CKgroup

G0135 BackdoorDiplomacy

Published 2021-09-21 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.0
Created
2021-09-21

Description

BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.

Related

Uses · MITRE ATT&CK (20)

  • S0647 Turian software (malware)
  • S0590 NBTscan software (tool)
  • T1588.001 Malware sub-technique
  • T1588.002 Tool sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1574.001 DLL sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1505.003 Web Shell sub-technique
  • S0262 QuasarRAT software (tool)
  • T1190 Exploit Public-Facing Application technique
  • S0002 Mimikatz software (tool)
  • S0020 China Chopper software (malware)
  • T1027 Obfuscated Files or Information technique
  • T1046 Network Service Discovery technique
  • T1049 System Network Connections Discovery technique
  • T1095 Non-Application Layer Protocol technique
  • T1105 Ingress Tool Transfer technique
  • T1120 Peripheral Device Discovery technique

References