Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:08:26 UTC
Home > List all groups > List all tools > List all groups using tool MINEDOOR
 Tool: MINEDOOR
Names MINEDOOR
Category Malware
Type Dropper
Description
(FireEye) In January 2020, Mandiant experts identified email campaigns that used
MINEDOOR to deliver the MINEBRIDGE backdoor. The limited overlap in TTPs between
these campaigns and contemporaneous FIN11 campaigns may suggest MINEDOOR is not
exclusive to FIN11.
Last change to this tool card: 20 October 2020
Download this tool card in JSON format
All groups using tool MINEDOOR
Changed Name Country Observed
APT groups
  FIN11 [Unknown] 2016-Mar 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ab9a9fd2-dc5d-4123-87e0-a8ccc21e928f
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ab9a9fd2-dc5d-4123-87e0-a8ccc21e928f
Page 1 of 1