MITRE ATT&CK Malware

BISCUIT (S0017)

[BISCUIT](https://attack.mitre.org/software/S0017) is a backdoor that has been used by [APT1](https://attack.mitre.org/groups/G0006) since as early as 2007. (Citation: Mandiant APT1)

Platforms: Windows

▪Techniques implemented (10)

T1113Screen Capture T1008Fallback Channels T1082System Information Discovery T1124System Time Discovery T1057Process Discovery T1105Ingress Tool Transfer T1056.001Keylogging T1573.002Asymmetric Cryptography T1033System Owner/User Discovery T1059.003Windows Command Shell

▪Used by groups (1)

G0006APT1

S0017on MITRE ATT&CK →

MITRE ATT&CK Malware

BISCUIT (S0017)

ShareX LinkedIn Reddit HN

[BISCUIT](https://attack.mitre.org/software/S0017) is a backdoor that has been used by [APT1](https://attack.mitre.org/groups/G0006) since as early as 2007. (Citation: Mandiant APT1)

Platforms: Windows

▪Techniques implemented (10)

▪Used by groups (1)

G0006APT1

S0017on MITRE ATT&CK →

BISCUIT (S0017)

▪Techniques implemented (10)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

BISCUIT (S0017)

▪Techniques implemented (10)

▪Used by groups (1)