MITRE ATT&CKsoftware (malware)

S0054 CloudDuke

Published 2017-05-31 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows
Aliases: MiniDionis, CloudLook
Version: 1.1
Created: 2017-05-31

Description

CloudDuke is malware that was used by APT29 in 2015.

Related

Uses · MITRE ATT&CK (3)

T1071.001 Web Protocols sub-technique
T1102.002 Bidirectional Communication sub-technique
T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

G0016 APT29 group

References

https://www.f-secure.com/documents/996508/1030745/dukes_whitepaper.pdf F-Secure The Dukes
https://securelist.com/minidionis-one-more-apt-with-a-usage-of-cloud-drives/71443/ Securelist Minidionis July 2015