Malware

Bandook

malware:bandook Also: Bandook backdoor, Bandook malware

Malware used in the campaign and attributed in the episode to the pseudonymous author Prince Ali.

Explore relationships

Mentioned in

• EP 38 Explicit 100%

  Malware used in the campaign and attributed in the episode to the pseudonymous author Prince Ali.

  “a second piece of malware which also was discovered called Bandook”

• EP 135 Explicit 100%

  Backdoor used in phishing emails targeting Dominican Republic government organizations and described as providing remote access to a computer.

  “a backdoor known as Bandook”

  “this malware gives remote access to a computer”

Relationships

Claims

Operation Manul INVOLVES Bandook

The campaign also used Bandook as a second piece of malware.

Explicit Confidence 99% · Jack Rhysider EP 38 Details

“a second piece of malware which also was discovered called Bandook.”

Bandook DEVELOPED_BY Prince Ali

Bandook was developed by a person using the name Prince Ali.

Explicit Confidence 99% · Cooper Quinton EP 38 Details

“Bandook was developed by a guy who goes by the name Prince Ali.”

The D.R. Incident INVOLVES Bandook

Hundreds of phishing emails contained or used Bandook as the attackers' backdoor.

Explicit Confidence 99% · Jack Rhysider EP 135 Details

“all of them had a backdoor the attackers were using, which was a backdoor known as Bandook”

Bandook ASSOCIATED_WITH Dark Caracal

Jack says Bandook has been known to be used by Dark Caracal, but presents the connection as suggestive rather than certain.

Uncertain Confidence 91% · Jack Rhysider EP 135 Details

“the Bandook malware has been known to be used by a group called Dark Caracal”