BackdoorDiplomacy
IntrusionSet · ATTACK:enterprise:G0135
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:G0135",
"title": "BackdoorDiplomacy",
"type": "IntrusionSet",
"source_url": "https://attack.mitre.org/groups/G0135",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "intrusion-set--9735c036-8ebe-47e9-9c77-b0ae656dab93",
"external_id": "G0135",
"domain": "enterprise",
"created": "2021-09-21T14:52:49.596Z",
"modified": "2026-07-31T18:48:10.579Z",
"version": "1.0",
"aliases": [
"BackdoorDiplomacy"
],
"tactics": [
],
"source_references": [
{
"source_name": "ESET BackdoorDiplomacy Jun 2021",
"url": "https://www.welivesecurity.com/2021/06/10/backdoordiplomacy-upgrading-quarian-turian/"
}
]
}Explicit source assertions (20)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1027
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--034b1ca2-8202-4eb9-9fbe-b519ed3dd5a8
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:S0647
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1ea2c546-6719-4695-93e6-891c3bad6194
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:S0020
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--368ed1d6-0ce4-457c-b0b8-aad079d7a28e
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3740c99a-3d2d-4ea3-ae6e-2a3bfcf572f3
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f4096d5-06d8-4a1e-bb31-0e2b37d5f622
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--41e2d922-5014-479d-85ba-da70ad6aa44b
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5017f2dc-e43e-438b-b63f-5f3f4603e9db
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1055.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5893fbd3-f3c0-4332-b2e3-e6a07142ef9d
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:S0002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ac0d84e-76ce-4702-8616-2a2f9b41cfdc
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:S0590
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b26be81-0112-43be-a3e5-a94d5b15c738
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b683c558-074d-4e29-808f-6d86948dd5d0
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:S0262
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc592166-c29c-4913-b8a0-ec266321a325
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1074.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c37f69b0-176a-483d-b75c-3b0c84e03276
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c92f6bab-4dfc-443d-903c-35318b80a396
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1049
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cdcf94e0-b105-49c0-8f62-64f7350a5658
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d758de81-c572-45dc-94ed-67a4dc1da3fe
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d92f4be1-6745-45a2-bfbb-c4cb227682d2
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1574.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4fe7d70-a0c9-4d2b-ba4a-0d6bc2e08f0e
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1588.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed5bd47a-cdc4-4962-b956-dd3ae7c00024
ESET BackdoorDiplomacy Jun 2021ATTACK:enterprise:G0135 → uses → ATTACK:enterprise:T1036.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f7fee577-ea37-4d2b-9353-8bfada984f55
ESET BackdoorDiplomacy Jun 2021