MINIBIKE
- Malware type
- backdoor
- Family
- Malware family
- Profile updated
- 2026-07-07 13:13:04
Targeted industries: government-and-public-sector defense-and-aerospace technology-and-telecommunications
Context
According to Mandiant, this is a custom backdoor that provides a more flexible code-execution interface and enhanced reconnaissance features compared to MINIBIKE.
Detection coverage
- 2 YARA rules
Detection rules
- SEKOIA_Backdoor_Win_Minibike (yara-rule)
- MALPEDIA_Win_Minibike_Auto (yara-rule)
Reports & references
- Mandiant — Suspected Iranian Unc1549 Targets Israel Middle East (report)
- research.checkpoint.com — Nimbus Manticore Deploys New Malware Targeting Europe (report)
- blog.checkpoint.com — Iranian Threat Actor Nimbus Manticore Expands Campaigns Into Europe With Advanced Malware And Fake Job Lures (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Minibike (report)
- catalyst.prodaft.com — Overview (report)