Skeleton Key — Malware Profile

Skeleton Key is malware used to inject false credentials into domain controllers with the intent of creating a backdoor password. Functionality similar to Skeleton Key is included as a module in Mimikatz.

MITRE ATT&CK techniques (1)

• T1556.001 Domain Controller Authentication

IntelFusions coverage

• Shark robot vacuum flaw exposes home cameras and Wi-Fi passwords 2026-07-17

Attributed threat actors

• APT5

Read the full analysis on IntelFusions