Malware.View on attack.mitre.org
| Technique | Procedure example |
|---|---|
| T1003 OS Credential Dumping |
OnionDuke steals credentials from its victims. |
| T1071.001 Web Protocols |
OnionDuke uses HTTP and HTTPS for C2. |
| T1102.003 One-Way Communication |
OnionDuke uses Twitter as a backup C2. |
| T1140 Deobfuscate/Decode Files or Information |
OnionDuke can use a custom decryption algorithm to decrypt strings. |
| T1499 Endpoint Denial of Service |
OnionDuke has the capability to use a Denial of Service module. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
