Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 21:22:08 UTC Home > List all groups > List all tools > List all groups using tool MINIBUS Tool: MINIBUS Names MINIBUS Category Malware Type Backdoor Description (Mandiant) Mandiant observed a second backdoor deployed in this campaign, which bears multiple similarities to MINIBIKE and was therefore named MINIBUS. The MINIBUS platform has been used since at least August 2023, likely during the same time as the latest MINIBIKE versions, though not necessarily to target the same victims. Information Malpedia Last change to this tool card: 29 December 2024 Download this tool card in JSON format All groups using tool MINIBUS Changed Name Country Observed APT groups       ↳ Subgroup: TA455, Smoke Sandstorm 2021-Sep 2023   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a9cbb5d4-5b51-4fc4-b1f8-b345fd587fd6 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a9cbb5d4-5b51-4fc4-b1f8-b345fd587fd6 Page 1 of 1