● Malware

Bonadan

Bonadan is a malicious version of OpenSSH which acts as a custom backdoor. Bonadan has been active since at least 2018 and combines a new cryptocurrency-mining module with the same credential-stealing module used by the Onderon family of backdoors.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

9 relationships

T1033: System Owner/User Discovery

source

T1573.001: Symmetric Cryptography

source

T1082: System Information Discovery

source

T1016: System Network Configuration Discovery

source

T1059: Command and Scripting Interpreter

source

T1057: Process Discovery

source

T1554: Compromise Host Software Binary

source

T1496.001: Compute Hijacking

source

T1105: Ingress Tool Transfer

source