Home Malware Programs Malware MiniDuke

MiniDuke

Posted: February 28, 2013

Threat Metric

Ranking: 8,733
Threat Level: 2/10
Infected PCs: 14,345
First Seen: February 28, 2013
Last Seen: October 7, 2023
OS(es) Affected: Windows

'MiniDuke' is a malware threat that aims at European government entities and institutions in the Ukraine, Portugal, Romania, and other countries via Adobe affecting vulnerable computers through PDFs that seem to be real. Once the malicious PDF file is downloaded to a targeted computer system, the exploit, which was written in Assembler, takes advantage of unpatched flaws in Reader versions 9, 10, and 11. Once MiniDuke is running on the computer system, it creates a unique identifier and encrypts any communication it might have with its authors. MiniDuke also includes mechanisms created in an effort to dupe anti-virus software into believing it's harmless. MiniDuke connects to Twitter to look for tweets on premade account. Those tweets carry tags with encrypted URLs for backdoors that can transfer it commands and open up other backdoors through GIF files.

Technical Details

Additional Information

The following URL's were detected:
r3adyt0download.com

Related Posts

Loading...