MiniDuke

MiniDuke Description

‘MiniDuke’ is a malware threat that aims at European government entities and institutions in the Ukraine, Portugal, Romania, and other countries via Adobe affecting vulnerable computers through PDFs that seem to be real. Once the malicious PDF file is downloaded to a targeted computer system, the exploit, which was written in Assembler, takes advantage of unpatched flaws in Reader versions 9, 10, and 11. Once MiniDuke is running on the computer system, it creates a unique identifier and encrypts any communication it might have with its authors. MiniDuke also includes mechanisms created in an effort to dupe anti-virus software into believing it’s harmless. MiniDuke connects to Twitter to look for tweets on premade account. Those tweets carry tags with encrypted URLs for backdoors that can transfer it commands and open up other backdoors through GIF files.

MiniDuke Automatic Detection Tool (Recommended)

Home Malware ProgramsMalware MiniDuke