Search/BLINDINGCAN
● Malware

BLINDINGCAN

BLINDINGCAN is a remote access Trojan that has been used by the North Korean government since at least early 2020 in cyber operations against defense, engineering, and government organizations in Western Europe and the US.

View graph Watch Export
Indicators tracked
0
Intelligence Reports20
20 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
28 relationships
T1218.011: Rundll32
source
T1132.001: Standard Encoding
source
T1129: Shared Modules
source
T1027.013: Encrypted/Encoded File
source
T1036.005: Match Legitimate Resource Name or Location
source
T1204.002: Malicious File
source
T1573.001: Symmetric Cryptography
source
T1566.001: Spearphishing Attachment
source
T1553.002: Code Signing
source
T1082: System Information Discovery
source
T1005: Data from Local System
source
T1140: Deobfuscate/Decode Files or Information
source
T1070.006: Timestomp
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1680: Local Storage Discovery
source