Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S9045
MITRE ATT&CK Malware

BACKUPOSINT v9.0 APEX PREDATOR (S9045)

ShareXLinkedInRedditHN

[BACKUPOSINT v9.0 APEX PREDATOR](https://attack.mitre.org/software/S9045) is a 49-module Python malware developed entirely by Anthropic’s Claude Code as part of the [AI-Assisted Breach of Mexico's Government Infrastructure](https://attack.mitre.org/campaigns/C0064) campaign. [BACKUPOSINT v9.0 APEX PREDATOR](https://attack.mitre.org/software/S9045) leverages publicly available techniques for network enumeration, credential harvesting, Active Directory interrogation, database access, privilege escalation, cloud metadata extraction, and lateral movement (Citation: AI-Mexico-Govt-Compromise).

Platforms: Linux, Windows, IaaS, Containers

▪Techniques implemented (17)

T1082System Information DiscoveryT1046Network Service DiscoveryT1057Process DiscoveryT1552.005Cloud Instance Metadata APIT1555.006Cloud Secrets Management StoresT1053.003CronT1018Remote System DiscoveryT1567Exfiltration Over Web ServiceT1683Generate ContentT1135Network Share DiscoveryT1090.002External ProxyT1059.009Cloud APIT1552.003Shell HistoryT1548.003Sudo and Sudo CachingT1552.001Credentials In FilesT1528Steal Application Access TokenT1609Container Administration Command
S9045 on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.