KomplexMalware
- carberplike
- downrage
- gamefish
- jhuhugit
- jkeyskw
- Seduploader
- sofacycarberp
- trojan.sofacy
Komplex is a backdoor that has been used by APT28 on OS X and appears to be developed in a similar manner to XAgentOSX.From MITRE ATT&CK
Last reported 4 months ago, by Sekoia.io1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1056.001Keylogging
“The toolkit was unchanged: X-Agent for keylogging and screenshotting, X-Tunnel for exfiltration, Mimikatz for credential theft.”
- T1059.009Cloud API
“On the highest-priority targets, APT28 escalates to BeardShell, a custom C++ backdoor that uses the icedrive cloud API for C2.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
APT28: An Evolution of Tradecraft from X-Agent to LLM Malware“Spear phishing campaigns or the SedKit exploit kit delivered the Seduploader first stage.”
Thanks — we review every report.