216.73.216.169

PolyglotDuke

The MITRE Corporation · Published 23/09/2020 17:42 · Modified 27/03/2026 01:03 Family

Essential information

Confidence
100/100
Is family
Yes
Published
23/09/2020 17:42
Modified
27/03/2026 01:03
Revoked
No
Author / Source
The MITRE Corporation
Related entities
10 attack patterns (mitre), 1 intrusion sets (apt), 1 campaign, 1 reports, 1 campaigns

Description

[PolyglotDuke](https://attack.mitre.org/software/S0518) is a downloader that has been used by [APT29](https://attack.mitre.org/groups/G0016) since at least 2013. [PolyglotDuke](https://attack.mitre.org/software/S0518) has been used to drop [MiniDuke](https://attack.mitre.org/software/S0051).(Citation: ESET Dukes October 2019)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references