MiniBus
- ID
- S9060
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 2 Oct 2026
MiniBus is a custom backdoor used for command execution, data discovery, gathering, and exfiltration. MiniBus has utilized Azure Cloud Infrastructure and unique adversary-controlled domains for command and control. MiniBus is an updated platform to its predecessor MiniBike and was first observed in August 2023. MiniBus has been affiliated with the cyber espionage threat group NIMBUS MANTICORE.[1]
Techniques used (8)
- T1057 Process Discovery
- T1071.001 Web Protocols
- T1105 Ingress Tool Transfer
- T1497.001 System Checks
- T1518.001 Security Software Discovery
- T1547.001 Registry Run Keys / Startup Folder
- T1574.001 DLL
- T1673 Virtual Machine Discovery