Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0050
MITRE ATT&CK Malware

CosmicDuke (S0050)

TinyBaronBotgenStudiosNemesisGemina
ShareXLinkedInRedditHN

[CosmicDuke](https://attack.mitre.org/software/S0050) is malware that was used by [APT29](https://attack.mitre.org/groups/G0016) from 2010 to 2015. (Citation: F-Secure The Dukes)

Platforms: Windows

▪Techniques implemented (19)

T1543.003Windows ServiceT1003.004LSA SecretsT1048.003Exfiltration Over Unencrypted Non-C2 ProtocolT1039Data from Network Shared DriveT1555Credentials from Password StoresT1083File and Directory DiscoveryT1555.003Credentials from Web BrowsersT1068Exploitation for Privilege EscalationT1115Clipboard DataT1056.001KeyloggingT1113Screen CaptureT1071.001Web ProtocolsT1114.001Local Email CollectionT1003.002Security Account ManagerT1020Automated ExfiltrationT1005Data from Local SystemT1053.005Scheduled TaskT1573.001Symmetric CryptographyT1025Data from Removable Media

▪Used by groups (1)

G0016APT29
S0050on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.