MILDFROST
- Malware type
- backdoor
- Family
- Malware family
- Languages
- java
- Profile updated
- 2026-09-08 06:52:29
Targeted industries: financial-services retail-and-hospitality
Targeted regions: country_code:br
Context
MILDFROST is a passive Java JAR backdoor used by BREEZE COMET (also tracked as PLUMP SPIDER) against Brazilian financial organisations. It lives inside the JVM process space and beacons over slow, covert DNS tunnels, querying delegated subdomains for instructions. It acts as the group's fallback command and control and can pull down fresh copies of their native executables.
Used by threat actors
- BREEZE COMET (threat-actor)