S1051LinuxWindows

S1051KEYPLUG

Platforms
2
ATT&CK
14.1
References
2

Description

[KEYPLUG](https://attack.mitre.org/software/S1051) is a modular backdoor written in C++, with Windows and Linux variants, that has been used by [APT41](https://attack.mitre.org/groups/G0096) since at least June 2021.(Citation: Mandiant APT41) Documented platforms: Linux, Windows. Attributed to ATT&CK group: APT41. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 2

LinuxWindows

References

  1. https://attack.mitre.org/software/S1051
  2. https://www.mandiant.com/resources/apt41-us-state-governments

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Kevin
Software
SDBbot
Software
PingPull
Software
DEADEYE
Software
EVILNUM
Software
PipeMon
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.