Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

Blue Mockingbird

1 incidentes 1 paises 1 sectores threat-actor Ultimo: 2026-05-25

Ver en IntelTracker → APTTrail →

Blue Mockingbird is a cluster of observed activity involving Monero cryptocurrency-mining payloads in dynamic-link library (DLL) form on Windows systems. The earliest observed Blue Mockingbird tools were created in December 2019.

Actores similares

blueskythreat-actor · 3 blueboxthreat-actor · 2 bluelockerthreat-actor · 2 bluebottleactor · 1 blue-termiteactor · 1 bluehornetactor · 1 apt-blueprintactor · 1 bluebravoactor · 1 bluewindgroupactor · 1 Blue Termiteapt · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Web	unknown	attack.mitre.org	OSINT

Malware asociado

Mimikatz, XMRig, COBALTSTRIKE, XMRig, XMRig

Tecnicas MITRE

T1027.013, T1588.002, T1112, T1190 - Exploit Public Facing Application, T1003, T1053

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

United Arab Emirates

Austria

Australia

Canada

Switzerland

Germany

Denmark

Finland

France

United Kingdom

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

Other Information ServicesMonetary Authorities-Central BankReal EstateHospitalsAccommodationAir TransportationManufacturingConstructionPublic AdministrationAdministrative &Waste Management