216.73.217.172

BLINDINGCAN

The MITRE Corporation · Published 27/10/2020 19:45 · Modified 27/03/2026 01:02 Family

Essential information

Confidence
100/100
Is family
Yes
Published
27/10/2020 19:45
Modified
27/03/2026 01:02
Revoked
No
Author / Source
The MITRE Corporation
Related entities
53 attack patterns (mitre), 2 intrusion sets (apt), 8 sectors, 6 countries, 45 indicators, 1 vulnerabilities (cve), 1 reports

Description

[BLINDINGCAN](https://attack.mitre.org/software/S0520) is a remote access Trojan that has been used by the North Korean government since at least early 2020 in cyber operations against defense, engineering, and government organizations in Western Europe and the US.(Citation: US-CERT BLINDINGCAN Aug 2020)(Citation: NHS UK BLINDINGCAN Aug 2020)

Marking (TLP)

TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references

Related entities

Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.