MITRE ATT&CKsoftware (malware)

S1051 KEYPLUG

Published 2022-12-12 Modified 2024-04-11 Official page ↗
Domain
enterprise
Platforms
Linux, Windows
Aliases
KEYPLUG.LINUX
Version
1.1
Created
2022-12-12

Description

KEYPLUG is a modular backdoor written in C++, with Windows and Linux variants, that has been used by APT41 since at least June 2021.

Related

Uses · MITRE ATT&CK (8)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1102.001 Dead Drop Resolver sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1090 Proxy technique
  • T1095 Non-Application Layer Protocol technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (2)

References