Sec
Lookup
Search
MITRE ATT&CK
software (malware)
S0162
Komplex
Published 2017-12-14
Modified 2025-04-25
Official page ↗
Domain
enterprise
Platforms
macOS
Version
1.1
Created
2017-12-14
Description
Komplex
is a backdoor that has been used by
APT28
on OS X and appears to be developed in a similar manner to
XAgentOSX
.
Related
Uses · MITRE ATT&CK
(7)
T1573.001
Symmetric Cryptography
sub-technique
T1071.001
Web Protocols
sub-technique
T1564.001
Hidden Files and Directories
sub-technique
T1070.004
File Deletion
sub-technique
T1543.001
Launch Agent
sub-technique
T1033
System Owner/User Discovery
technique
T1057
Process Discovery
technique
Referenced by MITRE ATT&CK · uses
(1)
G0007
APT28
group
References
https://researchcenter.paloaltonetworks.com/2017/02/unit42-xagentosx-sofacys-xagent-macos-tool/
XAgentOSX 2017
https://researchcenter.paloaltonetworks.com/2016/09/unit42-sofacys-komplex-os-x-trojan/
Sofacy Komplex Trojan