Malware: Cadelspy

Description

[Cadelspy](https://attack.mitre.org/software/S0454) is a backdoor that has been used by [APT39](https://attack.mitre.org/groups/G0087).(Citation: Symantec Chafer Dec 2015)

External References

• mitre-attack
• Symantec Chafer Dec 2015

Techniques Used by This Malware

• T1010 — Application Window Discovery
• T1056.001 — Keylogging
• T1082 — System Information Discovery
• T1113 — Screen Capture
• T1115 — Clipboard Data
• T1120 — Peripheral Device Discovery
• T1123 — Audio Capture
• T1560 — Archive Collected Data

APT Groups Using This Malware

• APT39