
| Names | BEACON | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (Mandiant) The BEACON payloads, once executed, communicated using either self-managed infrastructure hosted behind Cloudflare or utilized Cloudflare Workers as their command-and-control (C2) channels. BEACON configuration can be found in the Indicators of Compromise section. | |
| Information | <https://cloud.google.com/blog/topics/threat-intelligence/apt41-arisen-from-dust> | |
Last change to this tool card: 26 August 2024
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
APT groups | |||||
| APT 41 | 2012-Jul 2025 | ![]() | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||