Malware

BackdoorDiplomacy

First seen: 2020-01 • Status: active

Currently Active Threat

BackdoorDiplomacy spies on diplomats and foreign ministries, especially in Africa. They use customized hacking tools.

Overview

BackdoorDiplomacy is a Chinese espionage group that targets diplomatic organizations in Africa and the Middle East.

How It Spreads

  • Exploiting internet-facing servers
  • Spear-phishing

What It Does

  • Espionage
  • Data theft
  • Diplomatic targeting

Is your business exposed?

Target Platforms

Windows, Linux

Detection Tips

  • Monitor diplomatic organizations
  • Watch for Chinese APT indicators

MITRE ATT&CK Techniques

T1190, T1005

If You're Infected

  1. 1.

    Engage diplomatic security services

Related Malware

Plugx, Shadowpad

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required