MITRE ATT&CKsoftware (malware)

S9060 MiniBus

Published 2026-09-28 Modified 2026-10-01 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2026-09-28

Description

MiniBus is a custom backdoor used for command execution, data discovery, gathering, and exfiltration. MiniBus has utilized Azure Cloud Infrastructure and unique adversary-controlled domains for command and control. MiniBus is an updated platform to its predecessor MiniBike and was first observed in August 2023. MiniBus has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.

Related

Uses · MITRE ATT&CK (8)

  • T1673 Virtual Machine Discovery technique
  • T1071.001 Web Protocols sub-technique
  • T1574.001 DLL sub-technique
  • T1497.001 System Checks sub-technique
  • T1518.001 Security Software Discovery sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1057 Process Discovery technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • G1059 NIMBUS MANTICORE group

References