S9045 BACKUPOSINT v9.0 APEX PREDATOR

malwareEnterpriseICS

platformsLinux · Windows · IaaS · Containers

also known asBACKUPOSINT v9.0 APEX PREDATOR

BACKUPOSINT v9.0 APEX PREDATOR is a 49-module Python malware developed entirely by Anthropic’s Claude Code as part of the AI-Assisted Breach of Mexico's Government Infrastructure campaign. BACKUPOSINT v9.0 APEX PREDATOR leverages publicly available techniques for network enumeration, credential harvesting, Active Directory interrogation, database access, privilege escalation, cloud metadata extraction, and lateral movement.

techniques used (17)

ATT&CK techniques this enables or maps to.

T1018Remote System Discovery
T1046Network Service Discovery
T1053.003Cron
T1057Process Discovery
T1059.009Cloud API
T1082System Information Discovery
T1090.002External Proxy
T1135Network Share Discovery
T1528Steal Application Access Token
T1548.003Sudo and Sudo Caching
T1552.001Credentials In Files
T1552.003Shell History
T1552.005Cloud Instance Metadata API
T1555.006Cloud Secrets Management Stores
T1567Exfiltration Over Web Service
T1609Container Administration Command
T1683Generate Content

used by campaigns (1)

Campaigns that use this.

C0064AI-Assisted Breach of Mexico's Government Infrastructure

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan