BACKUPOSINT v9.0 APEX PREDATOR
- ID
- S9045
- Type
- Malware
- Platforms
- Linux, Windows, IaaS, Containers
- Source
- attack.mitre.org
- MITRE last modified
- 9 Oct 2026
BACKUPOSINT v9.0 APEX PREDATOR is a 49-module Python malware developed entirely by Anthropic’s Claude Code as part of the AI-Assisted Breach of Mexico's Government Infrastructure campaign. BACKUPOSINT v9.0 APEX PREDATOR leverages publicly available techniques for network enumeration, credential harvesting, Active Directory interrogation, database access, privilege escalation, cloud metadata extraction, and lateral movement [1].
Techniques used (17)
- T1018 Remote System Discovery
- T1046 Network Service Discovery
- T1053.003 Cron
- T1057 Process Discovery
- T1059.009 Cloud API
- T1082 System Information Discovery
- T1090.002 External Proxy
- T1135 Network Share Discovery
- T1528 Steal Application Access Token
- T1548.003 Sudo and Sudo Caching
- T1552.001 Credentials In Files
- T1552.003 Shell History
- T1552.005 Cloud Instance Metadata API
- T1555.006 Cloud Secrets Management Stores
- T1567 Exfiltration Over Web Service
- T1609 Container Administration Command
- T1683 Generate Content