MITRE ATT&CK / Software / S0052

OnionDuke

ID

S0052

Type

Malware

Platforms

Windows

Source

attack.mitre.org

MITRE last modified

25 Apr 2025

Techniques used (5)

• T1003 OS Credential Dumping
• T1071.001 Web Protocols
• T1102.003 One-Way Communication
• T1140 Deobfuscate/Decode Files or Information
• T1499 Endpoint Denial of Service

Groups using it (1)

• G0016 APT29

References

1. F-Secure The Dukes