Fysbis — Malware Profile
Fysbis is a Linux-based backdoor used by APT28 that dates back to at least 2014.
MITRE ATT&CK techniques (12)
- T1027.013 Encrypted/Encoded File
- T1036.004 Masquerade Task or Service
- T1036.005 Match Legitimate Resource Name or Location
- T1056.001 Keylogging
- T1057 Process Discovery
- T1059.004 Unix Shell
- T1070.004 File Deletion
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1132.001 Standard Encoding
- T1543.002 Systemd Service
- T1547.013 XDG Autostart Entries