Blue Mockingbird — APT Profile
Blue Mockingbird is a cluster of observed activity involving Monero cryptocurrency-mining payloads in dynamic-link library (DLL) form on Windows systems. The earliest observed Blue Mockingbird tools were created in December 2019.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
IntelFusions coverage (1)
- Old Telerik bug still lets hackers into IIS web servers 2026-09-28 · Vulnerabilities
Tools & malware
Vendor research
- Introducing Blue Mockingbird RedCanary