Search/KeyBoy

● Malware

KeyBoy

KeyBoy is malware that has been used in targeted campaigns against members of the Tibetan Parliament in 2016.

View graph Watch Export

Indicators tracked

0

Intelligence Reports30

30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

20 relationships

T1113: Screen Capture

T1056.001: Keylogging

T1027.013: Encrypted/Encoded File

T1559.002: Dynamic Data Exchange

T1543.003: Windows Service

T1082: System Information Discovery

T1070.006: Timestomp

T1555.003: Credentials from Web Browsers

T1547.004: Winlogon Helper DLL

T1016: System Network Configuration Discovery

T1083: File and Directory Discovery

T1059.001: PowerShell

T1001.003: Protocol or Service Impersonation

T1564.003: Hidden Window

T1059.006: Python

T1059.003: Windows Command Shell

T1059.005: Visual Basic

T1105: Ingress Tool Transfer