Uptime Hamster: 10d 6h 39mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
PanelActoresCampanasMapaTTPs
Panel » Actores » Blue Mockingbird
ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Logo del actor de amenaza Blue Mockingbird

Blue Mockingbird

1 incidentes 1 paises 1 sectores apt Ultimo: 2026-05-25
Ver en IntelTracker → APTTrail →
Blue Mockingbird is a cybercriminal group first identified in December 2019, primarily driven by financial motivation to deploy Monero cryptocurrency mining payloads on Windows systems. The group distinguishes itself by consistently exploiting CVE-2019-18935, a deserialization vulnerability in Telerik UI for ASP.NET AJAX, as its primary initial access vector.

Actores similares

blueskyransomware · 3blueboxransomware · 2bluelockerransomware · 2apt-blueprintactor · 1bluebravoactor · 1bluewindgroupactor · 1bluebottleactor · 1blue-termiteactor · 1bluehornetactor · 1Blue Termiteapt · 0
Malware asociado
Mimikatz, XMRig, COBALTSTRIKE, XMRig, XMRig
Tecnicas MITRE
T1027.013, T1588.002, T1112, T1190 - Exploit Public Facing Application, T1003, T1053
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (SOCRadar)

United Arab EmiratesAustriaAustraliaCanadaSwitzerlandGermanyDenmarkFinlandFranceUnited Kingdom

Sectores atacados

Software (1)

Sectores objetivo (SOCRadar)

Other Information ServicesMonetary Authorities-Central BankReal EstateHospitalsAccommodationAir TransportationManufacturingConstructionPublic AdministrationAdministrative &Waste Management