aol.pm

Backdoor.Oldrea

Software · ATTACK:enterprise:S0093

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0093",
  "title": "Backdoor.Oldrea",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0093",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--083bb47b-02c8-4423-81a2-f9ef58572974",
  "external_id": "S0093",
  "domain": "enterprise",
  "created": "2017-05-31T21:32:59.661Z",
  "modified": "2025-04-16T20:37:53.808Z",
  "version": "2.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Gigamon Berserk Bear October 2021",
      "url": "https://vblocalhost.com/uploads/VB2021-Slowik.pdf"
    },
    {
      "source_name": "Symantec Dragonfly Sept 2017",
      "url": "https://docs.broadcom.com/doc/dragonfly_threat_against_western_energy_suppliers"
    },
    {
      "source_name": "Symantec Dragonfly",
      "url": "https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=7382dce7-0260-4782-84cc-890971ed3f17&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments"
    }
  ]
}

Explicit source assertions (17)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--087721ee-6643-4453-8a76-8768ced7e506

Symantec Dragonfly · Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1046

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--129d828d-a84b-43dc-afc1-f46d8a25de0a

Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1070.004

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1d54c1d7-529f-4e4f-9a38-55b1b8cbff66

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1016

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--45a9a394-2371-4751-ae86-043630b6f52a

Symantec Dragonfly · Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1218.011

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--504b9a6b-bb70-4055-876b-12aafb342f69

Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1055

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--535e3fbe-e6d9-4608-9689-f8f1f8c1ddc9

Symantec Dragonfly · Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1132.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7123a6ee-2026-4db8-a983-cbc2932c2a09

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--984a898c-f469-4e7c-94c6-bf512ec69938

Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1087.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--98abda72-4760-4e8c-ab6c-5ed080868cfc

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1560

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a1dc7c15-bd44-43b3-a32b-8e4ea9856758

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1555.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--adf7a6a5-91b0-4c37-9fa5-0bfbb382a838

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1057

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b6ae274b-f0b3-4694-ab8d-37e0c62cff35

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b8f1354c-9cff-40ef-aa47-591952c735c3

Symantec Dragonfly

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1033

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d2d9a619-4379-4e15-9115-40ca9209f316

Symantec Dragonfly

ATTACK:enterprise:G0035 → uses → ATTACK:enterprise:S0093

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4968f45-d06b-4843-8f72-6e08beb94cab

Symantec Dragonfly · Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1018

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--efa28055-ee37-4501-8316-32a9c709ee98

Gigamon Berserk Bear October 2021

ATTACK:enterprise:S0093 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f19234f6-5b59-4229-aae1-70df380a076a

Symantec Dragonfly · Gigamon Berserk Bear October 2021

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.