216.73.217.172

BADFLICK

The MITRE Corporation · Published 26/08/2021 20:49 · Modified 27/03/2026 01:05 Family

Essential information

Confidence
100/100
Is family
Yes
Published
26/08/2021 20:49
Modified
27/03/2026 01:05
Revoked
No
Author / Source
The MITRE Corporation
Related entities
10 attack patterns (mitre), 1 intrusion sets (apt)

Description

[BADFLICK](https://attack.mitre.org/software/S0642) is a backdoor used by [Leviathan](https://attack.mitre.org/groups/G0065) in spearphishing campaigns first reported in 2018 that targeted the U.S. engineering and maritime industries.(Citation: FireEye Periscope March 2018)(Citation: Accenture MUDCARP March 2019)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references