News
All
Vulnerability
Incident
Advisory
AI
This week
Today
Ransomware
Australia
New Zealand
Japan
CVE intelligence
All
KEV
Recent
ATT&CK
Mind map
Techniques
Groups
Software
Mitigations
Guides
All
SSH keys
SSH login
TLS certificates
Certificate signing request
Multi-factor authentication
Secrets
Patching
Backups
Least privilege
Firewalls
Logging
Email authentication
Disk encryption
Offboarding
Vendor access
Password-protected zip
Active Directory
Linux commands
Windows commands
macOS commands
Playbooks
All
Essential Eight (legacy)
ASD Essentials
ISM / NIST CSF map
IR first hour
Tools
All
Hash
Encode
CIDR
Timestamp
Defang
URLs
IOC
Diff
Ports
Permissions
Glossary
All
IR
ACSC glossary
AU compliance
Cloud
Concepts
Crypto
Detection
DNS
Frameworks
Hardening
Identity
Logging
Malware
Network
Practitioner
Privacy
Threat intel
Vulnerability
About
MITRE ATT&CK
/
Software
/ S0054
CloudDuke
ID
S0054
Type
Malware
Associated names
MiniDionis, CloudLook
Platforms
Windows
Source
attack.mitre.org
MITRE last modified
25 Apr 2025
CloudDuke
is malware that was used by
APT29
in 2015.
[1]
[2]
Techniques used
(3)
T1071.001
Web Protocols
T1102.002
Bidirectional Communication
T1105
Ingress Tool Transfer
Groups using it
(1)
G0016
APT29
References
F-Secure The Dukes
Securelist Minidionis July 2015