coldbraid

BackdoorDiplomacy

BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.

ATT&CK ID
G0135
Techniques
13
Tools
5

Vulnerabilities it has exploited

Techniques

Resource Development

Obtain Capabilities

Initial Access

Exploit Public-Facing Application

Execution

Hijack Execution Flow

Persistence

Server Software Component

Privilege Escalation

Process Injection

Stealth

Obfuscated Files or InformationMasqueradingProcess InjectionHijack Execution Flow

Discovery

Network Service DiscoverySystem Network Connections DiscoveryPeripheral Device Discovery

Collection

Data Staged

Command and Control

Non-Application Layer ProtocolIngress Tool Transfer

Software

China Chopper · Mimikatz · NBTscan · QuasarRAT · Turian