MITRE ATT&CKsoftware (malware)

S1221 MOPSLED

Published 2025-06-11 Modified 2025-06-11 Official page ↗
Domain
enterprise
Platforms
Linux
Version
1.0
Created
2025-06-11

Description

MOPSLED is a shellcode-based modular backdoor that has been used by China-nexus cyber espionage actors including UNC3886 and APT41.

Related

Uses · MITRE ATT&CK (6)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1102.001 Dead Drop Resolver sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1095 Non-Application Layer Protocol technique
  • T1102 Web Service technique

Referenced by MITRE ATT&CK · uses (2)

References