MITRE ATT&CKsoftware (malware)

S9045 BACKUPOSINT v9.0 APEX PREDATOR

Published 2026-09-02 Modified 2026-10-09 Official page ↗
Domain
enterprise, ics
Platforms
Linux, Windows, IaaS, Containers
Version
1.0
Created
2026-09-02

Description

BACKUPOSINT v9.0 APEX PREDATOR is a 49-module Python malware developed entirely by Anthropic’s Claude Code as part of the AI-Assisted Breach of Mexico's Government Infrastructure campaign. BACKUPOSINT v9.0 APEX PREDATOR leverages publicly available techniques for network enumeration, credential harvesting, Active Directory interrogation, database access, privilege escalation, cloud metadata extraction, and lateral movement .

Related

Uses · MITRE ATT&CK (17)

  • T1683 Generate Content technique
  • T1555.006 Cloud Secrets Management Stores sub-technique
  • T1059.009 Cloud API sub-technique
  • T1609 Container Administration Command technique
  • T1090.002 External Proxy sub-technique
  • T1567 Exfiltration Over Web Service technique
  • T1552.005 Cloud Instance Metadata API sub-technique
  • T1552.001 Credentials In Files sub-technique
  • T1552.003 Shell History sub-technique
  • T1548.003 Sudo and Sudo Caching sub-technique
  • T1053.003 Cron sub-technique
  • T1528 Steal Application Access Token technique
  • T1135 Network Share Discovery technique
  • T1018 Remote System Discovery technique
  • T1046 Network Service Discovery technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique

Referenced by MITRE ATT&CK · uses (1)

  • C0064 AI-Assisted Breach of Mexico's Government Infrastructure campaign

References