Unidentified 092 (Confucius Backdoor)
- First seen
- 2020-09-01 00:00:00
- Malware type
- backdoor, rat
- Profile updated
- 2026-07-07 15:17:04
Targeted industries: government-and-public-sector technology-and-telecommunications
Targeted regions: country_code:in country_code:pk
Context
According to Antiy CERT, this is a C++ backdoor that was first discovered in an attack by Confucius in September 2020. Its main functions include creating scheduled tasks, retrieving process information, retrieving network adapter information, retrieving disk drive information, uploading files, downloading files, executing files, and providing shell access.
Reports & references
- mp.weixin.qq.com — N6Xqagtnexfpzxp1Mlwdtq (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Unidentified 092 (report)