DarkHydrus
- ID
- G0079
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
DarkHydrus is a threat group that has targeted government agencies and educational institutions in the Middle East since at least 2016. The group heavily leverages open-source tools and custom payloads for carrying out attacks. [1] [2]
Techniques used (7)
- T1059.001 PowerShell
- T1187 Forced Authentication
- T1204.002 Malicious File
- T1221 Template Injection
- T1564.003 Hidden Window
- T1566.001 Spearphishing Attachment
- T1588.002 Tool
