Uptime Hamster: 112d 13h 17mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
PanelActoresCampanasMapaTTPs
Panel » Actores » BackdoorDiplomacy
ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Logo del actor de amenaza BackdoorDiplomacy

BackdoorDiplomacy

1 incidentes 1 paises 1 sectores threat-actor CN Ultimo: 2026-05-25
Aliases: BackDip, CloudComputating, Quarian, Turian
Ver en IntelTracker → APTTrail →
BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.

Aliases del actor

BackDipCloudComputatingQuarianTurian

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
Repositoriounknowngithub.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownotx.alienvault.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownotx.alienvault.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownotx.alienvault.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownunit42.paloaltonetworks.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownwww.bitdefender.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownwww.welivesecurity.comBackdoorDiplomacy indicators and references
Repositoriounknowngithub.comBackdoorDiplomacy indicators and references
DLS / leak siteunknownraw.githubusercontent.comBackdoorDiplomacy indicators and references
Repositoriounknowngithub.comBackdoorDiplomacy indicators and references
Webunknownattack.mitre.orgOSINT
Motivacion
Information theft and espionage
Malware asociado
Turian, win.zhmimikatz, QuasarRAT
Tecnicas MITRE
T1036.004, T1547.001, T1553, T1003, T1560, T1018 - Remote System Discovery
CVEs relacionadas
CVE-2025-27423, CVE-2025-27218, CVE-2025-25015, CVE-2025-24494, CVE-2025-22226, CVE-2025-22225
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

AfghanistanBrazilBelarusIndiaKyrgyzstanKazakhstanMongoliaThailandTurkeyUkraine

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

Public AdministrationAgriculture&ForestryEnergy & Utilities ManufacturingTransportation&WarehousingFinanceHealthCare & Social AssistanceConstruction of BuildingsElectrical&Electronical ManufacturingAir Transportation

URLs nuevas detectadas en IntelTracker

github.com otx.alienvault.com otx.alienvault.com otx.alienvault.com unit42.paloaltonetworks.com www.bitdefender.com www.welivesecurity.com github.com raw.githubusercontent.com